Action not permitted
Modal body text goes here.
cve-2014-3577
Vulnerability from cvelistv5
Published
2014-08-21 00:00
Modified
2024-08-06 10:50
Severity ?
EPSS score ?
Summary
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T10:50:17.592Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2014:1891",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1891.html"
},
{
"name": "RHSA-2015:0765",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://access.redhat.com/solutions/1165533"
},
{
"name": "110143",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.osvdb.org/110143"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2015:0675",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "60713",
"tags": [
"third-party-advisory",
"x_transferred"
],
"url": "http://secunia.com/advisories/60713"
},
{
"tags": [
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html"
},
{
"name": "RHSA-2015:0720",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "RHSA-2014:1166",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"name": "RHSA-2015:1888",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
},
{
"name": "RHSA-2014:1833",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"name": "RHSA-2015:0850",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html"
},
{
"name": "RHSA-2015:0158",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0158.html"
},
{
"name": "RHSA-2014:1834",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"name": "60466",
"tags": [
"third-party-advisory",
"x_transferred"
],
"url": "http://secunia.com/advisories/60466"
},
{
"name": "RHSA-2015:0125",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0125.html"
},
{
"name": "RHSA-2015:1176",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
},
{
"name": "RHSA-2016:1931",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"name": "RHSA-2014:1146",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"name": "RHSA-2015:1177",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
},
{
"name": "69258",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/69258"
},
{
"name": "RHSA-2014:1892",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1892.html"
},
{
"name": "RHSA-2015:0851",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564"
},
{
"name": "RHSA-2014:1835",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1835.html"
},
{
"name": "1030812",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1030812"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782"
},
{
"name": "USN-2769-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2769-1"
},
{
"name": "60589",
"tags": [
"third-party-advisory",
"x_transferred"
],
"url": "http://secunia.com/advisories/60589"
},
{
"name": "RHSA-2014:1836",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1836.html"
},
{
"name": "apache-cve20143577-spoofing(95327)",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95327"
},
{
"name": "20140818 CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2014/Aug/48"
},
{
"name": "RHSA-2016:1773",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
},
{
"name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:1873",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html"
},
{
"name": "openSUSE-SU-2020:1875",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html"
},
{
"name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[oss-security] 20211006 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/10/06/1"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20231027-0003/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-08-18T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-27T14:07:16.016530",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2014:1891",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1891.html"
},
{
"name": "RHSA-2015:0765",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"url": "https://access.redhat.com/solutions/1165533"
},
{
"name": "110143",
"tags": [
"vdb-entry"
],
"url": "http://www.osvdb.org/110143"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2015:0675",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "60713",
"tags": [
"third-party-advisory"
],
"url": "http://secunia.com/advisories/60713"
},
{
"url": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html"
},
{
"name": "RHSA-2015:0720",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "RHSA-2014:1166",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"name": "RHSA-2015:1888",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
},
{
"name": "RHSA-2014:1833",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"name": "RHSA-2015:0850",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html"
},
{
"name": "RHSA-2015:0158",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0158.html"
},
{
"name": "RHSA-2014:1834",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"name": "60466",
"tags": [
"third-party-advisory"
],
"url": "http://secunia.com/advisories/60466"
},
{
"name": "RHSA-2015:0125",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0125.html"
},
{
"name": "RHSA-2015:1176",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
},
{
"name": "RHSA-2016:1931",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"name": "RHSA-2014:1146",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"name": "RHSA-2015:1177",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
},
{
"name": "69258",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/69258"
},
{
"name": "RHSA-2014:1892",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1892.html"
},
{
"name": "RHSA-2015:0851",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564"
},
{
"name": "RHSA-2014:1835",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1835.html"
},
{
"name": "1030812",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1030812"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782"
},
{
"name": "USN-2769-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2769-1"
},
{
"name": "60589",
"tags": [
"third-party-advisory"
],
"url": "http://secunia.com/advisories/60589"
},
{
"name": "RHSA-2014:1836",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1836.html"
},
{
"name": "apache-cve20143577-spoofing(95327)",
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95327"
},
{
"name": "20140818 CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack",
"tags": [
"mailing-list"
],
"url": "http://seclists.org/fulldisclosure/2014/Aug/48"
},
{
"name": "RHSA-2016:1773",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
},
{
"name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:1873",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html"
},
{
"name": "openSUSE-SU-2020:1875",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html"
},
{
"name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[oss-security] 20211006 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2021/10/06/1"
},
{
"url": "https://security.netapp.com/advisory/ntap-20231027-0003/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-3577",
"datePublished": "2014-08-21T00:00:00",
"dateReserved": "2014-05-14T00:00:00",
"dateUpdated": "2024-08-06T10:50:17.592Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2014-3577\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2014-08-21T14:55:05.100\",\"lastModified\":\"2023-11-07T02:20:13.943\",\"vulnStatus\":\"Modified\",\"evaluatorComment\":\"\u003ca href=\\\"http://cwe.mitre.org/data/definitions/297.html\\\" rel=\\\"nofollow\\\"\u003eCWE-297: Improper Validation of Certificate with Host Mismatch\u003c/a\u003e\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \\\"CN=\\\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \\\"foo,CN=www.apache.org\\\" string in the O field.\"},{\"lang\":\"es\",\"value\":\"org.apache.http.conn.ssl.AbstractVerifier en Apache HttpComponents HttpClient anterior a 4.3.5 y HttpAsyncClient anterior a 4.0.2 no verifica debidamente que el nombre del servidor coincide con un nombre de dominio en el campo del asunto Common Name (CN) o subjectAltName del certificado X.509, lo que permite a atacantes man-in-the-middle falsificar servidores SSL a trav\u00e9s de una cadena \u0027CN=\u0027 en un campo en el Distinguished Name (DN) de un certificado, tal y como fue demostrado por la cadena \u0027foo,CN=www.apache.org\u0027 en el campo O.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.8},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:httpclient:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0\",\"versionEndIncluding\":\"4.3.4\",\"matchCriteriaId\":\"B255B644-287F-4245-93EC-35C72729454F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:httpasyncclient:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0\",\"versionEndIncluding\":\"4.0.1\",\"matchCriteriaId\":\"A889F3E1-B405-4F5C-84A9-DFBA68ECEDC7\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1146.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1166.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1833.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1834.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1835.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1836.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1891.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1892.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0125.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0158.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0675.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0720.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0765.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0850.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0851.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1176.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1177.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1888.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1773.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1931.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2014/Aug/48\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/60466\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/60589\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/60713\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/10/06/1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.osvdb.org/110143\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securityfocus.com/bid/69258\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1030812\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2769-1\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/solutions/1165533\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/95327\",\"source\":\"secalert@redhat.com\",\"tags\":[\"VDB Entry\",\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20231027-0003/\",\"source\":\"secalert@redhat.com\"}]}}"
}
}
rhsa-2015_0158
Vulnerability from csaf_redhat
Published
2015-02-11 17:38
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0
Notes
Topic
Red Hat Enterprise Virtualization Manager 3.5.0 is now available.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat Enterprise Virtualization Manager is a visual tool for centrally
managing collections of virtual servers running Red Hat Enterprise Linux
and Microsoft Windows. This package also includes the Red Hat Enterprise
Virtualization Manager API, a set of scriptable commands that give
administrators the ability to perform queries and operations on Red Hat
Enterprise Virtualization Manager.
The Manager is a JBoss Application Server application that provides several
interfaces through which the virtual environment can be accessed and
interacted with, including an Administration Portal, a User Portal, and a
Representational State Transfer (REST) Application Programming Interface
(API).
It was discovered that the HttpClient incorrectly extracted the host name
from an X.509 certificate subject's Common Name (CN) field.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
A Cross-Site Request Forgery (CSRF) flaw was found in the oVirt REST API.
A remote attacker could provide a specially crafted web page that, when
visited by a user with a valid REST API session, would allow the attacker
to trigger calls to the oVirt REST API. (CVE-2014-0151)
It was found that the oVirt web admin interface did not include the
HttpOnly flag when setting session IDs with the Set-Cookie header.
This flaw could make it is easier for a remote attacker to hijack an oVirt
web admin session by leveraging a cross-site scripting (XSS) vulnerability.
(CVE-2014-0154)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
These updated Red Hat Enterprise Virtualization Manager packages also
include numerous bug fixes and various enhancements. Space precludes
documenting all of these changes in this advisory. Users are directed to
the Red Hat Enterprise Virtualization 3.5 Manager Release Notes document,
linked to in the References, for information on the most significant of
these changes.
All Red Hat Enterprise Virtualization Manager users are advised to upgrade
to these updated packages, which resolve these issues and add these
enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Enterprise Virtualization Manager 3.5.0 is now available.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise Virtualization Manager is a visual tool for centrally\nmanaging collections of virtual servers running Red Hat Enterprise Linux\nand Microsoft Windows. This package also includes the Red Hat Enterprise\nVirtualization Manager API, a set of scriptable commands that give\nadministrators the ability to perform queries and operations on Red Hat\nEnterprise Virtualization Manager.\n\nThe Manager is a JBoss Application Server application that provides several\ninterfaces through which the virtual environment can be accessed and\ninteracted with, including an Administration Portal, a User Portal, and a\nRepresentational State Transfer (REST) Application Programming Interface\n(API).\n\nIt was discovered that the HttpClient incorrectly extracted the host name\nfrom an X.509 certificate subject\u0027s Common Name (CN) field.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nA Cross-Site Request Forgery (CSRF) flaw was found in the oVirt REST API.\nA remote attacker could provide a specially crafted web page that, when\nvisited by a user with a valid REST API session, would allow the attacker\nto trigger calls to the oVirt REST API. (CVE-2014-0151)\n\nIt was found that the oVirt web admin interface did not include the\nHttpOnly flag when setting session IDs with the Set-Cookie header.\nThis flaw could make it is easier for a remote attacker to hijack an oVirt\nweb admin session by leveraging a cross-site scripting (XSS) vulnerability.\n(CVE-2014-0154)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nThese updated Red Hat Enterprise Virtualization Manager packages also\ninclude numerous bug fixes and various enhancements. Space precludes\ndocumenting all of these changes in this advisory. Users are directed to\nthe Red Hat Enterprise Virtualization 3.5 Manager Release Notes document,\nlinked to in the References, for information on the most significant of\nthese changes.\n\nAll Red Hat Enterprise Virtualization Manager users are advised to upgrade\nto these updated packages, which resolve these issues and add these\nenhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0158",
"url": "https://access.redhat.com/errata/RHSA-2015:0158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html"
},
{
"category": "external",
"summary": "570191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=570191"
},
{
"category": "external",
"summary": "716511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716511"
},
{
"category": "external",
"summary": "723211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=723211"
},
{
"category": "external",
"summary": "800155",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=800155"
},
{
"category": "external",
"summary": "804530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=804530"
},
{
"category": "external",
"summary": "817180",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=817180"
},
{
"category": "external",
"summary": "828591",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=828591"
},
{
"category": "external",
"summary": "832167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=832167"
},
{
"category": "external",
"summary": "859024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=859024"
},
{
"category": "external",
"summary": "874328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=874328"
},
{
"category": "external",
"summary": "878662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=878662"
},
{
"category": "external",
"summary": "879077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=879077"
},
{
"category": "external",
"summary": "884653",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=884653"
},
{
"category": "external",
"summary": "890517",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=890517"
},
{
"category": "external",
"summary": "894027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=894027"
},
{
"category": "external",
"summary": "894084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=894084"
},
{
"category": "external",
"summary": "895222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=895222"
},
{
"category": "external",
"summary": "902298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=902298"
},
{
"category": "external",
"summary": "906243",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=906243"
},
{
"category": "external",
"summary": "906938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=906938"
},
{
"category": "external",
"summary": "912057",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=912057"
},
{
"category": "external",
"summary": "918138",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=918138"
},
{
"category": "external",
"summary": "920708",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=920708"
},
{
"category": "external",
"summary": "922377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=922377"
},
{
"category": "external",
"summary": "928727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=928727"
},
{
"category": "external",
"summary": "947965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=947965"
},
{
"category": "external",
"summary": "955235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=955235"
},
{
"category": "external",
"summary": "961753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=961753"
},
{
"category": "external",
"summary": "962220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=962220"
},
{
"category": "external",
"summary": "962880",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=962880"
},
{
"category": "external",
"summary": "967466",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=967466"
},
{
"category": "external",
"summary": "977079",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=977079"
},
{
"category": "external",
"summary": "977306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=977306"
},
{
"category": "external",
"summary": "985945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=985945"
},
{
"category": "external",
"summary": "987295",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=987295"
},
{
"category": "external",
"summary": "987299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=987299"
},
{
"category": "external",
"summary": "988392",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=988392"
},
{
"category": "external",
"summary": "988422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=988422"
},
{
"category": "external",
"summary": "989546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=989546"
},
{
"category": "external",
"summary": "996512",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996512"
},
{
"category": "external",
"summary": "999975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=999975"
},
{
"category": "external",
"summary": "1001419",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1001419"
},
{
"category": "external",
"summary": "1003785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1003785"
},
{
"category": "external",
"summary": "1007133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007133"
},
{
"category": "external",
"summary": "1008512",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1008512"
},
{
"category": "external",
"summary": "1013670",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1013670"
},
{
"category": "external",
"summary": "1014326",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1014326"
},
{
"category": "external",
"summary": "1015186",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1015186"
},
{
"category": "external",
"summary": "1016916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1016916"
},
{
"category": "external",
"summary": "1022795",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1022795"
},
{
"category": "external",
"summary": "1025376",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1025376"
},
{
"category": "external",
"summary": "1025831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1025831"
},
{
"category": "external",
"summary": "1028387",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1028387"
},
{
"category": "external",
"summary": "1029934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1029934"
},
{
"category": "external",
"summary": "1032686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1032686"
},
{
"category": "external",
"summary": "1034309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1034309"
},
{
"category": "external",
"summary": "1034885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1034885"
},
{
"category": "external",
"summary": "1038632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1038632"
},
{
"category": "external",
"summary": "1040952",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1040952"
},
{
"category": "external",
"summary": "1043430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1043430"
},
{
"category": "external",
"summary": "1043808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1043808"
},
{
"category": "external",
"summary": "1044033",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1044033"
},
{
"category": "external",
"summary": "1044042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1044042"
},
{
"category": "external",
"summary": "1048019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1048019"
},
{
"category": "external",
"summary": "1052348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052348"
},
{
"category": "external",
"summary": "1053884",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1053884"
},
{
"category": "external",
"summary": "1058022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058022"
},
{
"category": "external",
"summary": "1059435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1059435"
},
{
"category": "external",
"summary": "1061156",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1061156"
},
{
"category": "external",
"summary": "1062435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062435"
},
{
"category": "external",
"summary": "1064273",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1064273"
},
{
"category": "external",
"summary": "1064544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1064544"
},
{
"category": "external",
"summary": "1065753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065753"
},
{
"category": "external",
"summary": "1067162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067162"
},
{
"category": "external",
"summary": "1070348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070348"
},
{
"category": "external",
"summary": "1070823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070823"
},
{
"category": "external",
"summary": "1071217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1071217"
},
{
"category": "external",
"summary": "1076705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076705"
},
{
"category": "external",
"summary": "1077284",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077284"
},
{
"category": "external",
"summary": "1079583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1079583"
},
{
"category": "external",
"summary": "1080144",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080144"
},
{
"category": "external",
"summary": "1081533",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1081533"
},
{
"category": "external",
"summary": "1081849",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1081849"
},
{
"category": "external",
"summary": "1081896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1081896"
},
{
"category": "external",
"summary": "1082110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1082110"
},
{
"category": "external",
"summary": "1082681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1082681"
},
{
"category": "external",
"summary": "1083760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083760"
},
{
"category": "external",
"summary": "1083763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083763"
},
{
"category": "external",
"summary": "1083766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083766"
},
{
"category": "external",
"summary": "1083769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083769"
},
{
"category": "external",
"summary": "1083926",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083926"
},
{
"category": "external",
"summary": "1083998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1083998"
},
{
"category": "external",
"summary": "1084120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084120"
},
{
"category": "external",
"summary": "1084611",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084611"
},
{
"category": "external",
"summary": "1085136",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1085136"
},
{
"category": "external",
"summary": "1085380",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1085380"
},
{
"category": "external",
"summary": "1087745",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087745"
},
{
"category": "external",
"summary": "1087917",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087917"
},
{
"category": "external",
"summary": "1091692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091692"
},
{
"category": "external",
"summary": "1092609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092609"
},
{
"category": "external",
"summary": "1092884",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092884"
},
{
"category": "external",
"summary": "1093393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093393"
},
{
"category": "external",
"summary": "1093742",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093742"
},
{
"category": "external",
"summary": "1093784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093784"
},
{
"category": "external",
"summary": "1093786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093786"
},
{
"category": "external",
"summary": "1095240",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1095240"
},
{
"category": "external",
"summary": "1096662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1096662"
},
{
"category": "external",
"summary": "1096971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1096971"
},
{
"category": "external",
"summary": "1097256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097256"
},
{
"category": "external",
"summary": "1097622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097622"
},
{
"category": "external",
"summary": "1098591",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098591"
},
{
"category": "external",
"summary": "1098638",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098638"
},
{
"category": "external",
"summary": "1098791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1098791"
},
{
"category": "external",
"summary": "1100194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1100194"
},
{
"category": "external",
"summary": "1100810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1100810"
},
{
"category": "external",
"summary": "1101018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101018"
},
{
"category": "external",
"summary": "1101565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101565"
},
{
"category": "external",
"summary": "1102018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102018"
},
{
"category": "external",
"summary": "1103490",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103490"
},
{
"category": "external",
"summary": "1103676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103676"
},
{
"category": "external",
"summary": "1103707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103707"
},
{
"category": "external",
"summary": "1103976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103976"
},
{
"category": "external",
"summary": "1104030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104030"
},
{
"category": "external",
"summary": "1104195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104195"
},
{
"category": "external",
"summary": "1104233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1104233"
},
{
"category": "external",
"summary": "1109326",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109326"
},
{
"category": "external",
"summary": "1109721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109721"
},
{
"category": "external",
"summary": "1110172",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110172"
},
{
"category": "external",
"summary": "1110636",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110636"
},
{
"category": "external",
"summary": "1111551",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1111551"
},
{
"category": "external",
"summary": "1112359",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112359"
},
{
"category": "external",
"summary": "1113499",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113499"
},
{
"category": "external",
"summary": "1113937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1113937"
},
{
"category": "external",
"summary": "1114041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114041"
},
{
"category": "external",
"summary": "1114241",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114241"
},
{
"category": "external",
"summary": "1114244",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114244"
},
{
"category": "external",
"summary": "1114253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114253"
},
{
"category": "external",
"summary": "1114260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114260"
},
{
"category": "external",
"summary": "1114554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1114554"
},
{
"category": "external",
"summary": "1115845",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1115845"
},
{
"category": "external",
"summary": "1115966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1115966"
},
{
"category": "external",
"summary": "1116486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1116486"
},
{
"category": "external",
"summary": "1118191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1118191"
},
{
"category": "external",
"summary": "1118818",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1118818"
},
{
"category": "external",
"summary": "1118847",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1118847"
},
{
"category": "external",
"summary": "1118879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1118879"
},
{
"category": "external",
"summary": "1119922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1119922"
},
{
"category": "external",
"summary": "1120197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120197"
},
{
"category": "external",
"summary": "1120829",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120829"
},
{
"category": "external",
"summary": "1120858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120858"
},
{
"category": "external",
"summary": "1121454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121454"
},
{
"category": "external",
"summary": "1123396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1123396"
},
{
"category": "external",
"summary": "1123754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1123754"
},
{
"category": "external",
"summary": "1125834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1125834"
},
{
"category": "external",
"summary": "1126839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126839"
},
{
"category": "external",
"summary": "1128949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1128949"
},
{
"category": "external",
"summary": "1129012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129012"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129634",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129634"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1130076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1130076"
},
{
"category": "external",
"summary": "1131693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131693"
},
{
"category": "external",
"summary": "1132078",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1132078"
},
{
"category": "external",
"summary": "1132191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1132191"
},
{
"category": "external",
"summary": "1133938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133938"
},
{
"category": "external",
"summary": "1134009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134009"
},
{
"category": "external",
"summary": "1136087",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1136087"
},
{
"category": "external",
"summary": "1139866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1139866"
},
{
"category": "external",
"summary": "1140098",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1140098"
},
{
"category": "external",
"summary": "1140430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1140430"
},
{
"category": "external",
"summary": "1141693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141693"
},
{
"category": "external",
"summary": "1142233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1142233"
},
{
"category": "external",
"summary": "1148379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148379"
},
{
"category": "external",
"summary": "1148623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148623"
},
{
"category": "external",
"summary": "1149135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1149135"
},
{
"category": "external",
"summary": "1149235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1149235"
},
{
"category": "external",
"summary": "1153544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1153544"
},
{
"category": "external",
"summary": "1154607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154607"
},
{
"category": "external",
"summary": "1154630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154630"
},
{
"category": "external",
"summary": "1156577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1156577"
},
{
"category": "external",
"summary": "1157211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157211"
},
{
"category": "external",
"summary": "1160889",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160889"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0158.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0",
"tracking": {
"current_release_date": "2024-11-14T14:33:31+00:00",
"generator": {
"date": "2024-11-14T14:33:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0158",
"initial_release_date": "2015-02-11T17:38:50+00:00",
"revision_history": [
{
"date": "2015-02-11T17:38:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-02-11T17:38:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV-M 3.5",
"product": {
"name": "RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-tools@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-websocket-proxy@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-restapi@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup-plugin-ovirt-engine-common@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup-plugin-websocket-proxy@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup-plugin-ovirt-engine@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-extensions-api-impl-javadoc@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-userportal@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-backend@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup-base@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-webadmin-portal@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-extensions-api-impl@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup-plugin-allinone@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-dbscripts@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-setup@3.5.0-0.29.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"product": {
"name": "rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"product_id": "rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm-lib@3.5.0-0.29.el6ev?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rhevm-0:3.5.0-0.29.el6ev.src",
"product": {
"name": "rhevm-0:3.5.0-0.29.el6ev.src",
"product_id": "rhevm-0:3.5.0-0.29.el6ev.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhevm@3.5.0-0.29.el6ev?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-0:3.5.0-0.29.el6ev.src as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src"
},
"product_reference": "rhevm-0:3.5.0-0.29.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-backend-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-lib-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-restapi-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-tools-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-userportal-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch as a component of RHEV-M 3.5",
"product_id": "6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
},
"product_reference": "rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-11T17:38:50+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0158"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-0151",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"discovery_date": "2014-03-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1081849"
}
],
"notes": [
{
"category": "description",
"text": "A Cross-Site Request Forgery (CSRF) flaw was found in the oVirt REST API. A remote attacker could provide a specially crafted web page that, when visited by a user with a valid REST API session, would allow the attacker to trigger calls to the oVirt REST API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ovirt-engine: cross-site request forgery (CSRF)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0151"
},
{
"category": "external",
"summary": "RHBZ#1081849",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1081849"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0151",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0151"
}
],
"release_date": "2014-03-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-11T17:38:50+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0158"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ovirt-engine: cross-site request forgery (CSRF)"
},
{
"cve": "CVE-2014-0154",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2014-03-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1081896"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the oVirt web admin interface did not include the HttpOnly flag when setting session IDs with the Set-Cookie header. This flaw could make it is easier for a remote attacker to hijack an oVirt web admin session by leveraging a cross-site scripting (XSS) vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0154"
},
{
"category": "external",
"summary": "RHBZ#1081896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1081896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0154",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0154"
}
],
"release_date": "2014-03-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-11T17:38:50+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0158"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-11T17:38:50+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0158"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-0:3.5.0-0.29.el6ev.src",
"6Server-RHEV-S-3.5:rhevm-backend-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-dbscripts-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-extensions-api-impl-javadoc-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-lib-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-restapi-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-base-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-allinone-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-ovirt-engine-common-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-setup-plugin-websocket-proxy-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-tools-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-userportal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-webadmin-portal-0:3.5.0-0.29.el6ev.noarch",
"6Server-RHEV-S-3.5:rhevm-websocket-proxy-0:3.5.0-0.29.el6ev.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_0720
Vulnerability from csaf_redhat
Published
2015-03-24 21:05
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss Fuse Service Works 6.0.0 security update
Notes
Topic
Red Hat JBoss Fuse Service Works 6.0.0 roll up patch 4, which fixes
multiple security issues and various bugs, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Fuse Service Works is the next-generation ESB and business
process automation infrastructure.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss Fuse
Service Works 6.0.0. It includes various bug fixes, which are listed in the
README file included with the patch files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-6153 fix
CVE-2014-3625 spring: Spring Framework: directory traversal flaw
CVE-2014-3578 spring: Spring Framework: Directory traversal
CVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via
ReflectionHelper
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3481 jboss-as-jaxrs: JBoss AS JAX-RS: Information disclosure via
XML eXternal Entity (XXE)
CVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller
role check implementation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web
application
CVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious
content length header
CVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied
XSLTs
CVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and
modification of application server configuration and state by application
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service
(JAXP, 8017298)
Red Hat would like to thank James Roper of Typesafe for reporting the
CVE-2014-0193 issue; CA Technologies for reporting the CVE-2014-3472
issue; and Alexander Papadakis for reporting the CVE-2014-3530 issue. The
CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product
Security; the CVE-2014-0005 issue was discovered by Josef Cacek of the Red
Hat JBoss EAP Quality Engineering team; the CVE-2014-3481 issue was
discovered by the Red Hat JBoss Enterprise Application Platform QE team;
and the CVE-2014-0075 and CVE-2014-3490 issues were discovered by David
Jorm of Red Hat Product Security.
All users of Red Hat JBoss Fuse Service Works 6.0.0 as provided from the
Red Hat Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Fuse Service Works 6.0.0 roll up patch 4, which fixes\nmultiple security issues and various bugs, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Fuse Service Works is the next-generation ESB and business\nprocess automation infrastructure.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss Fuse\nService Works 6.0.0. It includes various bug fixes, which are listed in the\nREADME file included with the patch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3625 spring: Spring Framework: directory traversal flaw\n\nCVE-2014-3578 spring: Spring Framework: Directory traversal\n\nCVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via\nReflectionHelper\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3481 jboss-as-jaxrs: JBoss AS JAX-RS: Information disclosure via\nXML eXternal Entity (XXE)\n\nCVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller\nrole check implementation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web\napplication\n\nCVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious\ncontent length header\n\nCVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied\nXSLTs\n\nCVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and\nmodification of application server configuration and state by application\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service\n(JAXP, 8017298)\n\nRed Hat would like to thank James Roper of Typesafe for reporting the\nCVE-2014-0193 issue; CA Technologies for reporting the CVE-2014-3472\nissue; and Alexander Papadakis for reporting the CVE-2014-3530 issue. The\nCVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product\nSecurity; the CVE-2014-0005 issue was discovered by Josef Cacek of the Red\nHat JBoss EAP Quality Engineering team; the CVE-2014-3481 issue was\ndiscovered by the Red Hat JBoss Enterprise Application Platform QE team;\nand the CVE-2014-0075 and CVE-2014-3490 issues were discovered by David\nJorm of Red Hat Product Security.\n\nAll users of Red Hat JBoss Fuse Service Works 6.0.0 as provided from the\nRed Hat Customer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0720",
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse.serviceworks\u0026downloadType=securityPatches\u0026version=6.0.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse.serviceworks\u0026downloadType=securityPatches\u0026version=6.0.0"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0720.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Fuse Service Works 6.0.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:33:43+00:00",
"generator": {
"date": "2024-11-14T14:33:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0720",
"initial_release_date": "2015-03-24T21:05:53+00:00",
"revision_history": [
{
"date": "2015-03-24T21:05:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:36:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Fuse Service Works 6.0",
"product": {
"name": "Red Hat JBoss Fuse Service Works 6.0",
"product_id": "Red Hat JBoss Fuse Service Works 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse_service_works:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Fuse Service Works"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0005",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2014-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1049736"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0005"
},
{
"category": "external",
"summary": "RHBZ#1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005"
}
],
"release_date": "2014-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3558",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2014-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120495"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the implementation of org.hibernate.validator.util.ReflectionHelper together with the permissions required to run Hibernate Validator under the Java Security Manager could allow a malicious application deployed in the same application container to execute several actions with escalated privileges, which might otherwise not be possible. This flaw could be used to perform various attacks, including but not restricted to, arbitrary code execution in systems that are otherwise secured by the Java Security Manager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Validator: JSM bypass via ReflectionHelper",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3558"
},
{
"category": "external",
"summary": "RHBZ#1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3558",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558"
}
],
"release_date": "2014-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Validator: JSM bypass via ReflectionHelper"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3578",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-08-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131882"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: Directory traversal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3578"
},
{
"category": "external",
"summary": "RHBZ#1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3578",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578"
},
{
"category": "external",
"summary": "http://www.pivotal.io/security/cve-2014-3578",
"url": "http://www.pivotal.io/security/cve-2014-3578"
},
{
"category": "external",
"summary": "https://jvn.jp/en/jp/JVN49154900/",
"url": "https://jvn.jp/en/jp/JVN49154900/"
}
],
"release_date": "2014-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: Directory traversal"
},
{
"cve": "CVE-2014-3625",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165936"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Spring Framework sanitized certain URLs. A remote attacker could use this flaw to obtain any file on the file system that was also accessible to the process in which the Spring web application was running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: directory traversal flaw",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse Service Works 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3625"
},
{
"category": "external",
"summary": "RHBZ#1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3625",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625"
}
],
"release_date": "2014-11-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-24T21:05:53+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Fuse Service Works installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Fuse Service Works\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Fuse Service Works server by starting the JBoss Application\nServer process.",
"product_ids": [
"Red Hat JBoss Fuse Service Works 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0720"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse Service Works 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: directory traversal flaw"
}
]
}
rhsa-2014_2020
Vulnerability from csaf_redhat
Published
2014-12-18 17:48
Modified
2024-11-14 14:32
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Application Platform 6.3.2 that
fixes three security issues is now available from the Red Hat Customer
Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was discovered that the Apache CXF incorrectly extracted the host name
from an X.509 certificate subject's Common Name (CN) field.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
It was found that Apache WSS4J (Web Services Security for Java), as used by
Apache CXF with the TransportBinding, did not, by default, properly enforce
all security requirements associated with SAML SubjectConfirmation methods.
A remote attacker could use this flaw to perform various types of spoofing
attacks on web service endpoints secured by WSS4j that rely on SAML for
authentication. (CVE-2014-3623)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
All users of Red Hat JBoss Enterprise Application Platform 6.3.2 as
provided from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Application Platform 6.3.2 that\nfixes three security issues is now available from the Red Hat Customer\nPortal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was discovered that the Apache CXF incorrectly extracted the host name\nfrom an X.509 certificate subject\u0027s Common Name (CN) field.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nIt was found that Apache WSS4J (Web Services Security for Java), as used by\nApache CXF with the TransportBinding, did not, by default, properly enforce\nall security requirements associated with SAML SubjectConfirmation methods.\nA remote attacker could use this flaw to perform various types of spoofing\nattacks on web service endpoints secured by WSS4j that rely on SAML for\nauthentication. (CVE-2014-3623)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3.2 as\nprovided from the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:2020",
"url": "https://access.redhat.com/errata/RHSA-2014:2020"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_2020.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update",
"tracking": {
"current_release_date": "2024-11-14T14:32:40+00:00",
"generator": {
"date": "2024-11-14T14:32:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:2020",
"initial_release_date": "2014-12-18T17:48:09+00:00",
"revision_history": [
{
"date": "2014-12-18T17:48:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-12-18T17:48:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:32:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:48:09+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2020"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:48:09+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2020"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3623",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1157304"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3623"
},
{
"category": "external",
"summary": "RHBZ#1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623"
}
],
"release_date": "2014-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:48:09+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2020"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods"
}
]
}
rhsa-2014_1835
Vulnerability from csaf_redhat
Published
2014-11-10 19:25
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes two
security issues is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Web Platform is a platform for Java applications,
which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Web Platform 5.2.0 as provided from
the Red Hat Customer Portal are advised to apply this update. The JBoss
server process must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes two\nsecurity issues is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Web Platform is a platform for Java applications,\nwhich integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Web Platform 5.2.0 as provided from\nthe Red Hat Customer Portal are advised to apply this update. The JBoss\nserver process must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1835",
"url": "https://access.redhat.com/errata/RHSA-2014:1835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform\u0026downloadType=securityPatches\u0026version=5.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform\u0026downloadType=securityPatches\u0026version=5.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1835.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:31+00:00",
"generator": {
"date": "2024-11-14T14:31:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1835",
"initial_release_date": "2014-11-10T19:25:52+00:00",
"revision_history": [
{
"date": "2014-11-10T19:25:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-10T19:25:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5.2",
"product": {
"name": "Red Hat JBoss Web Platform 5.2",
"product_id": "Red Hat JBoss Web Platform 5.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:52+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Web Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Web Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1835"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:52+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Web Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Web Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1835"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Web Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_0765
Vulnerability from csaf_redhat
Published
2015-03-31 17:00
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.0.0 security update
Notes
Topic
Red Hat JBoss Data Virtualization 6.0.0 2015 roll up patch 1, which fixes
multiple security issues and various bugs, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Data Virtualization is a lean data integration solution that
provides easy, real-time, and unified data access across disparate sources
to multiple applications and users. JBoss Data Virtualization makes data
spread across physically distinct systems-such as multiple databases, XML
files, and even Hadoop systems-appear as a set of tables in a local
database.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss Data
Virtualization 6.0.0. It includes various bug fixes, which are listed in
the README file included with the patch files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-6153 fix
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,
8017298)
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content
length header
CVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal
Entity (XXE)
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs
CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web
application
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter
Red Hat would like to thank James Roper of Typesafe for reporting
CVE-2014-0193, and Alexander Papadakis for reporting CVE-2014-3530.
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product
Security, the CVE-2014-0075 and CVE-2014-3490 issues were discovered by
David Jorm of Red Hat Product Security, and the CVE-2014-3481 issue was
discovered by the Red Hat JBoss Enterprise Application Platform QE team.
All users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the
Red Hat Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Data Virtualization 6.0.0 2015 roll up patch 1, which fixes\nmultiple security issues and various bugs, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Data Virtualization is a lean data integration solution that\nprovides easy, real-time, and unified data access across disparate sources\nto multiple applications and users. JBoss Data Virtualization makes data\nspread across physically distinct systems-such as multiple databases, XML\nfiles, and even Hadoop systems-appear as a set of tables in a local\ndatabase.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss Data\nVirtualization 6.0.0. It includes various bug fixes, which are listed in\nthe README file included with the patch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,\n8017298)\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content\nlength header\n\nCVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal\nEntity (XXE)\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter \n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, and Alexander Papadakis for reporting CVE-2014-3530.\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product\nSecurity, the CVE-2014-0075 and CVE-2014-3490 issues were discovered by\nDavid Jorm of Red Hat Product Security, and the CVE-2014-3481 issue was\ndiscovered by the Red Hat JBoss Enterprise Application Platform QE team.\n\nAll users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the\nRed Hat Customer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0765",
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=securityPatches\u0026version=6.0.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=securityPatches\u0026version=6.0.0"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0765.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.0.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:33:36+00:00",
"generator": {
"date": "2024-11-14T14:33:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0765",
"initial_release_date": "2015-03-31T17:00:43+00:00",
"revision_history": [
{
"date": "2015-03-31T17:00:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Data Virtualization 6.0",
"product": {
"name": "Red Hat JBoss Data Virtualization 6.0",
"product_id": "Red Hat JBoss Data Virtualization 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_virtualization:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Data Virtualization"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1322
Vulnerability from csaf_redhat
Published
2014-09-29 20:11
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes two
security issues is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Web Platform is a platform for Java applications,
which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Web Platform 5.2.0 as provided from
the Red Hat Customer Portal are advised to apply this update. The JBoss
server process must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes two\nsecurity issues is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Web Platform is a platform for Java applications,\nwhich integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Web Platform 5.2.0 as provided from\nthe Red Hat Customer Portal are advised to apply this update. The JBoss\nserver process must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1322",
"url": "https://access.redhat.com/errata/RHSA-2014:1322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform\u0026downloadType=securityPatches\u0026version=5.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform\u0026downloadType=securityPatches\u0026version=5.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1322.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:47+00:00",
"generator": {
"date": "2024-11-14T14:31:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1322",
"initial_release_date": "2014-09-29T20:11:35+00:00",
"revision_history": [
{
"date": "2014-09-29T20:11:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-29T20:11:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5.2",
"product": {
"name": "Red Hat JBoss Web Platform 5.2",
"product_id": "Red Hat JBoss Web Platform 5.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:11:35+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Web Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Web Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1322"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:11:35+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Web Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Web Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1322"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Web Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_1176
Vulnerability from csaf_redhat
Published
2015-06-23 16:52
Modified
2024-11-14 14:34
Summary
Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.0 update
Notes
Topic
Red Hat JBoss Fuse 6.2.0, which fixes multiple security issues, several
bugs, and adds various enhancements, is now available from the Red Hat
Customer Portal.
Red Hat Product Security has rated this update as having
Important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Red Hat JBoss Fuse 6.2.0 is a minor product release that updates Red Hat
JBoss Fuse 6.1.0, and includes several bug fixes and enhancements. Refer to
the Release Notes document, available from the link in the References
section, for a list of changes.
Details
Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint,
flexible, open source enterprise service bus and integration platform.
The following security fixes are addressed in this release:
It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate. (CVE-2013-7397)
It was found that async-http-client did not verify that the server hostname matched the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. (CVE-2013-7398)
It was found that the ServerTrustManager in the Smack XMPP API did not
verify basicConstraints and nameConstraints in X.509 certificate chains. A
man-in-the-middle attacker could use this flaw to spoof servers and obtain
sensitive information. (CVE-2014-0363)
It was found that the ParseRoster component in the Smack XMPP API did not
verify the From attribute of a roster-query IQ stanza. A remote attacker
could use this flaw to spoof IQ responses. (CVE-2014-0364)
It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate. (CVE-2014-3577)
It was found that the JClouds scriptbuilder Statements class writes a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, denial of service, or other attacks. (CVE-2014-4651)
It was found that SSLSocket in Smack did not perform hostname verification. An attacker could redirect traffic between an application and an XMPP server by providing a valid certificate for a domain under the attacker's control. (CVE-2014-5075)
It was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions. (CVE-2014-8175)
It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226)
It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227)
It was found that PKIX trust components allowed an X509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority. (CVE-2015-1796)
The CVE-2014-8175 issue was reported by Jay Kumar SenSharma of Red Hat.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Fuse 6.2.0, which fixes multiple security issues, several\nbugs, and adds various enhancements, is now available from the Red Hat\nCustomer Portal.\n\nRed Hat Product Security has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nRed Hat JBoss Fuse 6.2.0 is a minor product release that updates Red Hat\nJBoss Fuse 6.1.0, and includes several bug fixes and enhancements. Refer to\nthe Release Notes document, available from the link in the References\nsection, for a list of changes.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint,\nflexible, open source enterprise service bus and integration platform.\n\nThe following security fixes are addressed in this release:\n\nIt was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate. (CVE-2013-7397)\n\nIt was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. (CVE-2013-7398)\n\nIt was found that the ServerTrustManager in the Smack XMPP API did not\nverify basicConstraints and nameConstraints in X.509 certificate chains. A\nman-in-the-middle attacker could use this flaw to spoof servers and obtain\nsensitive information. (CVE-2014-0363)\n\nIt was found that the ParseRoster component in the Smack XMPP API did not\nverify the From attribute of a roster-query IQ stanza. A remote attacker\ncould use this flaw to spoof IQ responses. (CVE-2014-0364)\n\nIt was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate. (CVE-2014-3577)\n\nIt was found that the JClouds scriptbuilder Statements class writes a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, denial of service, or other attacks. (CVE-2014-4651)\n\nIt was found that SSLSocket in Smack did not perform hostname verification. An attacker could redirect traffic between an application and an XMPP server by providing a valid certificate for a domain under the attacker\u0027s control. (CVE-2014-5075)\n\nIt was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions. (CVE-2014-8175)\n\nIt was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226)\n\nIt was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227)\n\nIt was found that PKIX trust components allowed an X509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority. (CVE-2015-1796)\n\nThe CVE-2014-8175 issue was reported by Jay Kumar SenSharma of Red Hat.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1176",
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse\u0026downloadType=distributions\u0026version=6.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse\u0026downloadType=distributions\u0026version=6.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_Fuse/",
"url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_Fuse/"
},
{
"category": "external",
"summary": "1093273",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093273"
},
{
"category": "external",
"summary": "1093276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093276"
},
{
"category": "external",
"summary": "1112877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112877"
},
{
"category": "external",
"summary": "1127276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127276"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "1196619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196619"
},
{
"category": "external",
"summary": "1205112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1205112"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1176.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:34:08+00:00",
"generator": {
"date": "2024-11-14T14:34:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:1176",
"initial_release_date": "2015-06-23T16:52:52+00:00",
"revision_history": [
{
"date": "2015-06-23T16:52:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:34:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Fuse 6.2",
"product": {
"name": "Red Hat JBoss Fuse 6.2",
"product_id": "Red Hat JBoss Fuse 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:6.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Fuse"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-7397",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133769"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7397"
},
{
"category": "external",
"summary": "RHBZ#1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7397",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397"
}
],
"release_date": "2013-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions"
},
{
"cve": "CVE-2013-7398",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133773"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: missing hostname verification for SSL certificates",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7398"
},
{
"category": "external",
"summary": "RHBZ#1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7398",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7398"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398"
}
],
"release_date": "2013-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: missing hostname verification for SSL certificates"
},
{
"cve": "CVE-2014-0363",
"discovery_date": "2014-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093273"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the ServerTrustManager in the Smack XMPP API did not verify basicConstraints and nameConstraints in X.509 certificate chains. A man-in-the-middle attacker could use this flaw to spoof servers and obtain sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "smack: incorrect X.509 certificate validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0363"
},
{
"category": "external",
"summary": "RHBZ#1093273",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093273"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0363",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0363"
}
],
"release_date": "2013-02-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "smack: incorrect X.509 certificate validation"
},
{
"cve": "CVE-2014-0364",
"discovery_date": "2014-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093276"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the ParseRoster component in the Smack XMPP API did not verify the From attribute of a roster-query IQ stanza. A remote attacker could use this flaw to spoof IQ responses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "smack: IQ response spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0364"
},
{
"category": "external",
"summary": "RHBZ#1093276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093276"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0364",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0364"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0364",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0364"
}
],
"release_date": "2014-01-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "smack: IQ response spoofing"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-4651",
"discovery_date": "2014-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112877"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the JClouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JClouds: predictable tmp file creation in ScriptBuilder Statements",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-4651"
},
{
"category": "external",
"summary": "RHBZ#1112877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112877"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-4651",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-4651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4651"
}
],
"release_date": "2014-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JClouds: predictable tmp file creation in ScriptBuilder Statements"
},
{
"cve": "CVE-2014-5075",
"discovery_date": "2014-08-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1127276"
}
],
"notes": [
{
"category": "description",
"text": "It was found that SSLSocket in Smack did not perform hostname verification. An attacker could redirect traffic between an application and an XMPP server by providing a valid certificate for a domain under the attacker\u0027s control.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "smack: MitM vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5075"
},
{
"category": "external",
"summary": "RHBZ#1127276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127276"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5075"
}
],
"release_date": "2014-08-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "smack: MitM vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Jay Kumar SenSharma"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-8175",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2015-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1205112"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Fuse: insufficient access permissions checks when accessing Hawtio console",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8175"
},
{
"category": "external",
"summary": "RHBZ#1205112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1205112"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8175",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8175"
}
],
"release_date": "2015-06-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Fuse: insufficient access permissions checks when accessing Hawtio console"
},
{
"cve": "CVE-2015-0226",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191446"
}
],
"notes": [
{
"category": "description",
"text": "It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0226"
},
{
"category": "external",
"summary": "RHBZ#1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)"
},
{
"cve": "CVE-2015-0227",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191451"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0227"
},
{
"category": "external",
"summary": "RHBZ#1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property"
},
{
"cve": "CVE-2015-1796",
"discovery_date": "2015-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1196619"
}
],
"notes": [
{
"category": "description",
"text": "It was found that PKIX trust components allowed an X.509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1796"
},
{
"category": "external",
"summary": "RHBZ#1196619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1796",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1796"
},
{
"category": "external",
"summary": "http://shibboleth.net/community/advisories/secadv_20150225.txt",
"url": "http://shibboleth.net/community/advisories/secadv_20150225.txt"
}
],
"release_date": "2015-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation"
},
{
"cve": "CVE-2016-3088",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2016-05-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1339318"
}
],
"notes": [
{
"category": "description",
"text": "The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "activemq: Fileserver web application vulnerability allowing RCE",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss A-MQ 6.3 , Red Hat JBoss Fuse 6.3, and Red Hat JBoss Fuse Service Works 6.0.0 do not provide the vulnerable component and are not affected by this flaw. Red Hat JBoss A-MQ 6.2.1 and Red Hat JBoss Fuse 6.2.1 disable the vulnerable component and as such are not vulnerable to this flaw. The fileserver component was first disabled in A-MQ 6.2.0 and Fuse 6.2.0. Users of older, unsupported versions of these products are strongly advised to observe the mitigation provided on this page.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3088"
},
{
"category": "external",
"summary": "RHBZ#1339318",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1339318"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3088",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3088"
},
{
"category": "external",
"summary": "http://activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt",
"url": "http://activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:52+00:00",
"details": "All users of Red Hat JBoss Fuse 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1176"
},
{
"category": "workaround",
"details": "Users are advised to use other FTP and HTTP based file servers for transferring blob messages. Fileserver web application SHOULD NOT be used in older version of the broker and it should be disabled (it has been disabled by default since 5.12.0). This can be done by removing (commenting out) the following lines from conf\\jetty.xml file\n\n\u003cbean class=\"org.eclipse.jetty.webapp.WebAppContext\"\u003e\n \u003cproperty name=\"contextPath\" value=\"/fileserver\" /\u003e\n \u003cproperty name=\"resourceBase\" value=\"${activemq.home}/webapps/fileserver\" /\u003e\n \u003cproperty name=\"logUrlOnStart\" value=\"true\" /\u003e\n \u003cproperty name=\"parentLoaderPriority\" value=\"true\" /\u003e\n\u003c/bean\u003e",
"product_ids": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-02-10T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "activemq: Fileserver web application vulnerability allowing RCE"
}
]
}
rhsa-2014_1833
Vulnerability from csaf_redhat
Published
2014-11-10 19:26
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Notes
Topic
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix
two security issues are now available for Red Hat Enterprise Linux 4, 5,
and 6.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Web Platform is a platform for Java applications,
which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Web Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix\ntwo security issues are now available for Red Hat Enterprise Linux 4, 5,\nand 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Web Platform is a platform for Java applications,\nwhich integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Web Platform 5.2.0 on Red Hat\nEnterprise Linux 4, 5, and 6 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to\ntake effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1833",
"url": "https://access.redhat.com/errata/RHSA-2014:1833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1833.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:19+00:00",
"generator": {
"date": "2024-11-14T14:31:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1833",
"initial_release_date": "2014-11-10T19:26:12+00:00",
"revision_history": [
{
"date": "2014-11-10T19:26:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-10T19:26:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el4"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"relates_to_product_reference": "6Server-JBEWP-5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"known_not_affected": [
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:26:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Web Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1833"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"known_not_affected": [
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:26:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Web Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1833"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEWP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1146
Vulnerability from csaf_redhat
Published
2014-09-03 18:15
Modified
2024-11-14 14:30
Summary
Red Hat Security Advisory: httpcomponents-client security update
Notes
Topic
Updated httpcomponents-client packages that fix one security issue are now
available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
HttpClient is an HTTP/1.1 compliant HTTP agent implementation based on
httpcomponents HttpCore.
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
For additional information on this flaw, refer to the Knowledgebase
article in the References section.
All httpcomponents-client users are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated httpcomponents-client packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "HttpClient is an HTTP/1.1 compliant HTTP agent implementation based on\nhttpcomponents HttpCore.\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nFor additional information on this flaw, refer to the Knowledgebase\narticle in the References section.\n\nAll httpcomponents-client users are advised to upgrade to these updated\npackages, which contain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1146",
"url": "https://access.redhat.com/errata/RHSA-2014:1146"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1146.json"
}
],
"title": "Red Hat Security Advisory: httpcomponents-client security update",
"tracking": {
"current_release_date": "2024-11-14T14:30:26+00:00",
"generator": {
"date": "2024-11-14T14:30:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1146",
"initial_release_date": "2014-09-03T18:15:03+00:00",
"revision_history": [
{
"date": "2014-09-03T18:15:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-03T18:15:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:30:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"product": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"product_id": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client-javadoc@4.2.5-5.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"product": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"product_id": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client@4.2.5-5.el7_0?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"product": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"product_id": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client@4.2.5-5.el7_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-0:4.2.5-5.el7_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src"
},
"product_reference": "httpcomponents-client-0:4.2.5-5.el7_0.src",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
},
"product_reference": "httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Client-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-03T18:15:03+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Client-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1146"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Client-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Client-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7ComputeNode-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Server-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Server-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.noarch",
"7Workstation-optional-7.0.Z:httpcomponents-client-0:4.2.5-5.el7_0.src",
"7Workstation-optional-7.0.Z:httpcomponents-client-javadoc-0:4.2.5-5.el7_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2016_1931
Vulnerability from csaf_redhat
Published
2016-09-23 20:34
Modified
2024-11-14 14:35
Summary
Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update
Notes
Topic
Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 4, which fixes one security issue and includes several bug fixes, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications.
This patch is an update to Red Hat JBoss Fuse 6.2.1 and Red Hat JBoss A-MQ 6.2.1. It includes several bug fixes, which are documented in the readme.txt file included with the patch files.
Security Fix(es):
* It was found that the fix for CVE-2012-6153 was incomplete: the code
added to check that the server hostname matches the domain name in a
subject's Common Name (CN) field in X.509 certificates was flawed. A
man-in-the-middle attacker could use this flaw to spoof an SSL server using
a specially crafted X.509 certificate. (CVE-2014-3577)
Refer to the readme.txt file included with the patch files for installation instructions.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 4, which fixes one security issue and includes several bug fixes, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications.\n\nThis patch is an update to Red Hat JBoss Fuse 6.2.1 and Red Hat JBoss A-MQ 6.2.1. It includes several bug fixes, which are documented in the readme.txt file included with the patch files.\n\nSecurity Fix(es):\n\n* It was found that the fix for CVE-2012-6153 was incomplete: the code\nadded to check that the server hostname matches the domain name in a\nsubject\u0027s Common Name (CN) field in X.509 certificates was flawed. A\nman-in-the-middle attacker could use this flaw to spoof an SSL server using\na specially crafted X.509 certificate. (CVE-2014-3577)\n\nRefer to the readme.txt file included with the patch files for installation instructions.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1931",
"url": "https://access.redhat.com/errata/RHSA-2016:1931"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse\u0026downloadType=securityPatches\u0026version=6.2.1",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse\u0026downloadType=securityPatches\u0026version=6.2.1"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq\u0026downloadType=securityPatches\u0026version=6.2.1",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq\u0026downloadType=securityPatches\u0026version=6.2.1"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1931.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T14:35:26+00:00",
"generator": {
"date": "2024-11-14T14:35:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2016:1931",
"initial_release_date": "2016-09-23T20:34:44+00:00",
"revision_history": [
{
"date": "2016-09-23T20:34:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:38:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:35:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss A-MQ 6.2",
"product": {
"name": "Red Hat JBoss A-MQ 6.2",
"product_id": "Red Hat JBoss A-MQ 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_amq:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Fuse 6.2",
"product": {
"name": "Red Hat JBoss Fuse 6.2",
"product_id": "Red Hat JBoss Fuse 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:6.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Fuse"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2",
"Red Hat JBoss Fuse 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-09-23T20:34:44+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2",
"Red Hat JBoss Fuse 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1931"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2",
"Red Hat JBoss Fuse 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_1009
Vulnerability from csaf_redhat
Published
2015-05-14 15:14
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 update
Notes
Topic
Red Hat JBoss Portal 6.2.0, which fixes multiple security issues and
various bugs, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Red Hat JBoss Portal is the open source implementation of the Java EE suite
of services and Portal services running atop Red Hat JBoss Enterprise
Application Platform.
Details
This release of Red Hat JBoss Portal 6.2.0 serves as a replacement for
Red Hat JBoss BPM Suite 6.1.1, and includes bug fixes and enhancements.
Refer to the Red Hat JBoss BPM Suite 6.2.0 Release Notes for information on
the most significant of these changes. The Release Notes are available at
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass
CVE-2013-1624 bouncycastle: TLS CBC padding timing attack
CVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws
handlers
CVE-2013-4286 JBossWeb: multiple content-length header poisoning flaws
CVE-2013-5855 Mojarra JSF2: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2013-7285 XStream: remote code execution due to insecure XML
deserialization
CVE-2014-0005 PicketBox/JBossSX: Security domain authentication
configuration modifiable by application
CVE-2014-0018 JBoss AS Server: Unchecked access to MSC Service Registry
under JSM
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid
SAML Tokens as valid
CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a
Symmetric EncryptBeforeSigning policy
CVE-2014-0050 JBossWeb: denial of service due to too-small buffer size used
bt MultipartStream
CVE-2014-0058 Red Hat JBoss EAP 6: Plain text password logging
CVE-2014-0059 PicketBox/JBossSX: World readable audit.log file
CVE-2014-0075 JBossWeb: Limited DoS in chunked transfer encoding input
filter
CVE-2014-0086 JBoss RichFaces: remote denial of service via memory
exhaustion
CVE-2014-0093 Red Hat JBoss EAP 6: JSM policy not respected by deployed
applications
CVE-2014-0096 JBossWeb: XXE vulnerability via user supplied XSLTs
CVE-2014-0099 JBossWeb: Request smuggling via malicious content length
header
CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing
feature (oCERT-2014-002)
CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause
OOM errors
CVE-2014-0110 Apache CXF: Large invalid content fills temporary space
CVE-2014-0119 JBossWeb: XML parser hijack by malicious web application
CVE-2014-0193 Netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 JBossWeb: Limited DoS in chunked transfer encoding input
filter
CVE-2014-0245 GateIn WSRP: Information disclosure via unsafe concurrency
handling in interceptor
CVE-2014-3472 JBoss AS Controller: Invalid EJB caller role check
CVE-2014-3481 JBoss AS JAX RS Integration: Information disclosure via XML
XXE
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3574 Apache POI: entity expansion (billion laughs) flaw
CVE-2014-3529 Apache POI: XXE flaw
CVE-2014-3577 Apache HttpComponents incomplete fix for CVE-2012-6153
CVE-2014-3586 JBoss AS CLI: Insecure default permissions on history file
CVE-2014-4172 Cas-client: Bypass of security constraints via URL parameter
injection
Red Hat would like to thank James Roper of Typesafe for reporting
CVE-2014-0193, CA Technologies for reporting CVE-2014-3472, and Alexander
Papadakis for reporting CVE-2014-3530. The CVE-2013-2133 issue was
discovered by Richard Opalka and Arun Neelicattu of Red Hat, the
CVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP
Quality Engineering team, the CVE-2014-0018 issue was discovered by Stuart
Douglas of Red Hat, the CVE-2014-3481 issue was discovered by the Red Hat
JBoss Enterprise Application Platform QE team, the CVE-2014-0075 and
CVE-2014-3490 issues were discovered by David Jorm of Red Hat Product
Security, and the CVE-2014-0093 issue was discovered by Josef Cacek of the
Red Hat JBoss EAP Quality Engineering team.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Portal 6.2.0, which fixes multiple security issues and\nvarious bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.\n\nRed Hat JBoss Portal is the open source implementation of the Java EE suite\nof services and Portal services running atop Red Hat JBoss Enterprise\nApplication Platform.",
"title": "Topic"
},
{
"category": "general",
"text": "This release of Red Hat JBoss Portal 6.2.0 serves as a replacement for\nRed Hat JBoss BPM Suite 6.1.1, and includes bug fixes and enhancements.\nRefer to the Red Hat JBoss BPM Suite 6.2.0 Release Notes for information on\nthe most significant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass\n\nCVE-2013-1624 bouncycastle: TLS CBC padding timing attack\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4286 JBossWeb: multiple content-length header poisoning flaws\n\nCVE-2013-5855 Mojarra JSF2: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2013-7285 XStream: remote code execution due to insecure XML\ndeserialization\n\nCVE-2014-0005 PicketBox/JBossSX: Security domain authentication\nconfiguration modifiable by application\n\nCVE-2014-0018 JBoss AS Server: Unchecked access to MSC Service Registry\nunder JSM\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0050 JBossWeb: denial of service due to too-small buffer size used\nbt MultipartStream\n\nCVE-2014-0058 Red Hat JBoss EAP 6: Plain text password logging\n\nCVE-2014-0059 PicketBox/JBossSX: World readable audit.log file\n\nCVE-2014-0075 JBossWeb: Limited DoS in chunked transfer encoding input\nfilter\n\nCVE-2014-0086 JBoss RichFaces: remote denial of service via memory\nexhaustion\n\nCVE-2014-0093 Red Hat JBoss EAP 6: JSM policy not respected by deployed\napplications\n\nCVE-2014-0096 JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0099 JBossWeb: Request smuggling via malicious content length\nheader\n\nCVE-2014-0107 Xalan-Java: insufficient constraints in secure processing\nfeature (oCERT-2014-002)\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content fills temporary space\n\nCVE-2014-0119 JBossWeb: XML parser hijack by malicious web application\n\nCVE-2014-0193 Netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 JBossWeb: Limited DoS in chunked transfer encoding input\nfilter\n\nCVE-2014-0245 GateIn WSRP: Information disclosure via unsafe concurrency\nhandling in interceptor\n\nCVE-2014-3472 JBoss AS Controller: Invalid EJB caller role check\n\nCVE-2014-3481 JBoss AS JAX RS Integration: Information disclosure via XML\nXXE\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3574 Apache POI: entity expansion (billion laughs) flaw\n\nCVE-2014-3529 Apache POI: XXE flaw\n\nCVE-2014-3577 Apache HttpComponents incomplete fix for CVE-2012-6153\n\nCVE-2014-3586 JBoss AS CLI: Insecure default permissions on history file\n\nCVE-2014-4172 Cas-client: Bypass of security constraints via URL parameter\ninjection\n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, CA Technologies for reporting CVE-2014-3472, and Alexander\nPapadakis for reporting CVE-2014-3530. The CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat, the\nCVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP\nQuality Engineering team, the CVE-2014-0018 issue was discovered by Stuart\nDouglas of Red Hat, the CVE-2014-3481 issue was discovered by the Red Hat\nJBoss Enterprise Application Platform QE team, the CVE-2014-0075 and\nCVE-2014-3490 issues were discovered by David Jorm of Red Hat Product\nSecurity, and the CVE-2014-0093 issue was discovered by Josef Cacek of the\nRed Hat JBoss EAP Quality Engineering team.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1009",
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal\u0026downloadType=distributions",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal\u0026downloadType=distributions"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/"
},
{
"category": "external",
"summary": "908428",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908428"
},
{
"category": "external",
"summary": "969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "1052783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783"
},
{
"category": "external",
"summary": "1058454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058454"
},
{
"category": "external",
"summary": "1062337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062337"
},
{
"category": "external",
"summary": "1063641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063641"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1067268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067268"
},
{
"category": "external",
"summary": "1069921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069921"
},
{
"category": "external",
"summary": "1070046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070046"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "1101303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101303"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1126687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131350"
},
{
"category": "external",
"summary": "1138135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138135"
},
{
"category": "external",
"summary": "1138140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138140"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1009.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:33:31+00:00",
"generator": {
"date": "2024-11-14T14:33:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:1009",
"initial_release_date": "2015-05-14T15:14:47+00:00",
"revision_history": [
{
"date": "2015-05-14T15:14:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Portal 6.2",
"product": {
"name": "Red Hat JBoss Portal 6.2",
"product_id": "Red Hat JBoss Portal 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_portal_platform:6.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Portal"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-1624",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2013-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "908428"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that bouncycastle leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: TLS CBC padding timing attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-1624"
},
{
"category": "external",
"summary": "RHBZ#908428",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908428"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-1624",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1624"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/",
"url": "http://www.isg.rhul.ac.uk/tls/"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf",
"url": "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf"
}
],
"release_date": "2013-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: TLS CBC padding timing attack"
},
{
"acknowledgments": [
{
"names": [
"Richard Opalka"
]
},
{
"names": [
"Arun Neelicattu"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-2133",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2013-06-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "969924"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WS: EJB3 role restrictions are not applied to jaxws handlers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-2133"
},
{
"category": "external",
"summary": "RHBZ#969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2133"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133"
}
],
"release_date": "2013-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WS: EJB3 role restrictions are not applied to jaxws handlers"
},
{
"cve": "CVE-2013-4286",
"discovery_date": "2014-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1069921"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: multiple content-length header poisoning flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4286"
},
{
"category": "external",
"summary": "RHBZ#1069921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4286",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4286"
}
],
"release_date": "2014-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: multiple content-length header poisoning flaws"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"cve": "CVE-2013-7285",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2013-12-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1051277"
}
],
"notes": [
{
"category": "description",
"text": "It was found that XStream could deserialize arbitrary user-supplied XML content, representing objects of any type. A remote attacker able to pass XML to XStream could use this flaw to perform a variety of attacks, including remote code execution in the context of the server running the XStream application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "XStream: remote code execution due to insecure XML deserialization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7285"
},
{
"category": "external",
"summary": "RHBZ#1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7285",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285"
},
{
"category": "external",
"summary": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html",
"url": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html"
},
{
"category": "external",
"summary": "http://xstream.codehaus.org/security.html",
"url": "http://xstream.codehaus.org/security.html"
},
{
"category": "external",
"summary": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/",
"url": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/"
}
],
"release_date": "2013-12-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "XStream: remote code execution due to insecure XML deserialization"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0005",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2014-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1049736"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0005"
},
{
"category": "external",
"summary": "RHBZ#1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005"
}
],
"release_date": "2014-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application"
},
{
"acknowledgments": [
{
"names": [
"Stuart Douglas"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0018",
"discovery_date": "2014-01-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1052783"
}
],
"notes": [
{
"category": "description",
"text": "In Red Hat JBoss Enterprise Application Platform, when running under a security manager, it was possible for deployed code to get access to the Modular Service Container (MSC) service registry without any permission checks. This could allow malicious deployments to modify the internal state of the server in various ways.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jboss-as-server: Unchecked access to MSC Service Registry under JSM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0018"
},
{
"category": "external",
"summary": "RHBZ#1052783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0018",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0018"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0018",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0018"
}
],
"release_date": "2014-01-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jboss-as-server: Unchecked access to MSC Service Registry under JSM"
},
{
"cve": "CVE-2014-0034",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093529"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0034"
},
{
"category": "external",
"summary": "RHBZ#1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid"
},
{
"cve": "CVE-2014-0035",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093530"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0035"
},
{
"category": "external",
"summary": "RHBZ#1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy"
},
{
"cve": "CVE-2014-0050",
"discovery_date": "2014-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1062337"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0050"
},
{
"category": "external",
"summary": "RHBZ#1062337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0050"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0050"
}
],
"release_date": "2014-02-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream"
},
{
"cve": "CVE-2014-0058",
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063641"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security audit functionality logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain application or server authentication credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "EAP6: Plain text password logging during security audit",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0058"
},
{
"category": "external",
"summary": "RHBZ#1063641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063641"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0058"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0058",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0058"
}
],
"release_date": "2014-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "EAP6: Plain text password logging during security audit"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0086",
"discovery_date": "2014-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1067268"
}
],
"notes": [
{
"category": "description",
"text": "It was found that certain malformed requests caused RichFaces to leak memory. A remote, unauthenticated attacker could use this flaw to send a large number of malformed requests to a RichFaces application that uses the Atmosphere framework, leading to a denial of service (excessive memory consumption) on the application server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RichFaces: remote denial of service via memory exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0086"
},
{
"category": "external",
"summary": "RHBZ#1067268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0086",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0086"
}
],
"release_date": "2014-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RichFaces: remote denial of service via memory exhaustion"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0093",
"discovery_date": "2014-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1070046"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to perform actions which would otherwise be restricted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "6: JSM policy not respected by deployed applications",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0093"
},
{
"category": "external",
"summary": "RHBZ#1070046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0093",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0093"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0093",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0093"
}
],
"release_date": "2014-02-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "6: JSM policy not respected by deployed applications"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0107",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2014-03-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1080248"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the secure processing feature of Xalan-Java had insufficient restrictions defined for certain properties and features. A remote attacker able to provide Extensible Stylesheet Language Transformations (XSLT) content to be processed by an application using Xalan-Java could use this flaw to bypass the intended constraints of the secure processing feature. Depending on the components available in the classpath, this could lead to arbitrary remote code execution in the context of the application server running the application that uses Xalan-Java.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Xalan-Java: insufficient constraints in secure processing feature",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0107"
},
{
"category": "external",
"summary": "RHBZ#1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0107",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107"
},
{
"category": "external",
"summary": "http://www.ocert.org/advisories/ocert-2014-002.html",
"url": "http://www.ocert.org/advisories/ocert-2014-002.html"
}
],
"release_date": "2014-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Xalan-Java: insufficient constraints in secure processing feature"
},
{
"cve": "CVE-2014-0109",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093526"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0109"
},
{
"category": "external",
"summary": "RHBZ#1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors"
},
{
"cve": "CVE-2014-0110",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Large invalid content could cause temporary space to fill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0110"
},
{
"category": "external",
"summary": "RHBZ#1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Large invalid content could cause temporary space to fill"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0245",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"discovery_date": "2014-05-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1101303"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WSRP: Information disclosure via unsafe concurrency handling in interceptor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0245"
},
{
"category": "external",
"summary": "RHBZ#1101303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101303"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0245",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0245"
}
],
"release_date": "2015-03-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WSRP: Information disclosure via unsafe concurrency handling in interceptor"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"cve": "CVE-2014-3529",
"discovery_date": "2014-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1138135"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache POI would resolve entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to read files accessible to the user running the application server, and potentially perform more advanced XML External Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-poi: XML eXternal Entity (XXE) flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that CVE-2014-3529 is not exploitable by default in JBoss Portal Platform as provided by Red Hat. This flaw would only be exploitable if the Apache POI library provided by JBoss Portal Platform were used by a custom application to process user-supplied XML documents.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3529"
},
{
"category": "external",
"summary": "RHBZ#1138135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138135"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3529",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3529"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3529",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3529"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-poi: XML eXternal Entity (XXE) flaw"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3574",
"discovery_date": "2014-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1138140"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache POI would expand an unlimited number of entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to trigger a denial of service attack via excessive CPU and memory consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-poi: entity expansion (billion laughs) flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that CVE-2014-3574 is not exploitable by default in JBoss Portal Platform as provided by Red Hat. This flaw would only be exploitable if the Apache POI library provided by JBoss Portal Platform were used by a custom application to process user-supplied XML documents.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3574"
},
{
"category": "external",
"summary": "RHBZ#1138140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138140"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3574",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3574"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-poi: entity expansion (billion laughs) flaw"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3586",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2014-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1126687"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user\u0027s home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CLI: Insecure default permissions on history file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3586"
},
{
"category": "external",
"summary": "RHBZ#1126687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3586",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3586"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3586",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3586"
}
],
"release_date": "2015-03-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CLI: Insecure default permissions on history file"
},
{
"cve": "CVE-2014-4172",
"discovery_date": "2014-08-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131350"
}
],
"notes": [
{
"category": "description",
"text": "A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cas-client: Bypass of security constraints via URL parameter injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-4172"
},
{
"category": "external",
"summary": "RHBZ#1131350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131350"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-4172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4172"
},
{
"category": "external",
"summary": "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html",
"url": "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html"
}
],
"release_date": "2014-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cas-client: Bypass of security constraints via URL parameter injection"
},
{
"cve": "CVE-2014-7839",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165328"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTeasy: External entities expanded by DocumentProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7839"
},
{
"category": "external",
"summary": "RHBZ#1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7839"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839"
}
],
"release_date": "2014-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTeasy: External entities expanded by DocumentProvider"
},
{
"cve": "CVE-2015-0226",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191446"
}
],
"notes": [
{
"category": "description",
"text": "It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0226"
},
{
"category": "external",
"summary": "RHBZ#1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)"
},
{
"cve": "CVE-2015-0227",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191451"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0227"
},
{
"category": "external",
"summary": "RHBZ#1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property"
}
]
}
rhsa-2015_0235
Vulnerability from csaf_redhat
Published
2015-02-17 22:27
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.3 security update
Notes
Topic
Red Hat JBoss BRMS 6.0.3 roll up patch 2, which fixes multiple security
issues, several bugs, and adds various enhancements, is now available from
the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Red Hat JBoss BRMS is a business rules management system for the
management, storage, creation, modification, and deployment of JBoss
Rules.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss BRMS
6.0.3, and includes bug fixes and enhancements. It includes various bug
fixes, which are listed in the README file included with the patch files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-6153 fix
CVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service
(JAXP, 8017298)
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and
modification of application server configuration and state by application
CVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied
XSLTs
CVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious
content length header
CVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web
application
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter
CVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller
role check implementation
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via
ReflectionHelper
CVE-2014-3578 spring: Spring Framework: Directory traversal
CVE-2014-3625 spring: Spring Framework: directory traversal flaw
CVE-2014-3682 jbpm-designer: XXE in BPMN2 import
CVE-2014-8114 UberFire: Information disclosure and RCE via insecure file
upload/download servlets
CVE-2014-8115 KIE Workbench: Insufficient authorization constraints
Red Hat would like to thank James Roper of Typesafe for reporting the
CVE-2014-0193 issue; CA Technologies for reporting the CVE-2014-3472 issue;
Alexander Papadakis for reporting the CVE-2014-3530 issue; and David Jorm
for reporting the CVE-2014-8114 and CVE-2014-8115 issues. The CVE-2012-6153
issue was discovered by Florian Weimer of Red Hat Product Security; the
CVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP
Quality Engineering team; and the CVE-2014-0075, CVE-2014-3490, and
CVE-2014-3682 issues were discovered by David Jorm of Red Hat Product
Security.
All users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer
Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BRMS 6.0.3 roll up patch 2, which fixes multiple security\nissues, several bugs, and adds various enhancements, is now available from\nthe Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BRMS is a business rules management system for the\nmanagement, storage, creation, modification, and deployment of JBoss\nRules.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss BRMS\n6.0.3, and includes bug fixes and enhancements. It includes various bug\nfixes, which are listed in the README file included with the patch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-6153 fix\n\nCVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service\n(JAXP, 8017298)\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and\nmodification of application server configuration and state by application\n\nCVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied\nXSLTs\n\nCVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious\ncontent length header\n\nCVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter\n\nCVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller\nrole check implementation\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via\nReflectionHelper\n\nCVE-2014-3578 spring: Spring Framework: Directory traversal\n\nCVE-2014-3625 spring: Spring Framework: directory traversal flaw\n\nCVE-2014-3682 jbpm-designer: XXE in BPMN2 import\n\nCVE-2014-8114 UberFire: Information disclosure and RCE via insecure file\nupload/download servlets\n\nCVE-2014-8115 KIE Workbench: Insufficient authorization constraints\n\nRed Hat would like to thank James Roper of Typesafe for reporting the\nCVE-2014-0193 issue; CA Technologies for reporting the CVE-2014-3472 issue;\nAlexander Papadakis for reporting the CVE-2014-3530 issue; and David Jorm\nfor reporting the CVE-2014-8114 and CVE-2014-8115 issues. The CVE-2012-6153\nissue was discovered by Florian Weimer of Red Hat Product Security; the\nCVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP\nQuality Engineering team; and the CVE-2014-0075, CVE-2014-3490, and\nCVE-2014-3682 issues were discovered by David Jorm of Red Hat Product\nSecurity.\n\nAll users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer\nPortal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0235",
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.0.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.0.3"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "1148260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148260"
},
{
"category": "external",
"summary": "1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "external",
"summary": "1169544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169544"
},
{
"category": "external",
"summary": "1169545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169545"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0235.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.3 security update",
"tracking": {
"current_release_date": "2024-11-14T14:33:36+00:00",
"generator": {
"date": "2024-11-14T14:33:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0235",
"initial_release_date": "2015-02-17T22:27:36+00:00",
"revision_history": [
{
"date": "2015-02-17T22:27:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BRMS 6.0",
"product": {
"name": "Red Hat JBoss BRMS 6.0",
"product_id": "Red Hat JBoss BRMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_brms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Decision Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0005",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2014-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1049736"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0005"
},
{
"category": "external",
"summary": "RHBZ#1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005"
}
],
"release_date": "2014-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3558",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2014-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120495"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the implementation of org.hibernate.validator.util.ReflectionHelper together with the permissions required to run Hibernate Validator under the Java Security Manager could allow a malicious application deployed in the same application container to execute several actions with escalated privileges, which might otherwise not be possible. This flaw could be used to perform various attacks, including but not restricted to, arbitrary code execution in systems that are otherwise secured by the Java Security Manager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Validator: JSM bypass via ReflectionHelper",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3558"
},
{
"category": "external",
"summary": "RHBZ#1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3558",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558"
}
],
"release_date": "2014-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Validator: JSM bypass via ReflectionHelper"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3578",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-08-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131882"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: Directory traversal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3578"
},
{
"category": "external",
"summary": "RHBZ#1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3578",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578"
},
{
"category": "external",
"summary": "http://www.pivotal.io/security/cve-2014-3578",
"url": "http://www.pivotal.io/security/cve-2014-3578"
},
{
"category": "external",
"summary": "https://jvn.jp/en/jp/JVN49154900/",
"url": "https://jvn.jp/en/jp/JVN49154900/"
}
],
"release_date": "2014-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: Directory traversal"
},
{
"cve": "CVE-2014-3625",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165936"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Spring Framework sanitized certain URLs. A remote attacker could use this flaw to obtain any file on the file system that was also accessible to the process in which the Spring web application was running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: directory traversal flaw",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3625"
},
{
"category": "external",
"summary": "RHBZ#1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3625",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625"
}
],
"release_date": "2014-11-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: directory traversal flaw"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3682",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-10-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1148260"
}
],
"notes": [
{
"category": "description",
"text": "An XML External Entity (XXE) flaw was found in the jbpm-designer BPMN2 import function. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jbpm-designer: XXE in BPMN2 import",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3682"
},
{
"category": "external",
"summary": "RHBZ#1148260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148260"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3682",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3682"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3682",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3682"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jbpm-designer: XXE in BPMN2 import"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
]
}
],
"cve": "CVE-2014-8114",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-11-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169544"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the default implementation of FileUploadServlet and FileDownloadServlet provided by the UberFire Framework did not restrict the paths to which a file could be written or read from. In applications using this framework and exposing these servlets, a remote attacker could gain access to information stored in files accessible to the application container process, or execute arbitrary code by uploading malicious content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "UberFire: Information disclosure and RCE via insecure file upload/download servlets",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8114"
},
{
"category": "external",
"summary": "RHBZ#1169544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169544"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8114",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8114"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "UberFire: Information disclosure and RCE via insecure file upload/download servlets"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
]
}
],
"cve": "CVE-2014-8115",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2014-11-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169545"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the default authorization constrains applied on servelets deployed in the KIE Workbench application were insufficient. A remote, authenticated user without sufficient privileges could use this flaw to upload or download arbitrary files, perform privileged actions that otherwise cannot be accessed, or perform other more complex attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Workbench: Insufficient authorization constraints",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5 is now in Phase 3, Extended Life Support, of its life cycle. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8115"
},
{
"category": "external",
"summary": "RHBZ#1169545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8115",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8115"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:36+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Workbench: Insufficient authorization constraints"
}
]
}
rhsa-2015_1888
Vulnerability from csaf_redhat
Published
2015-10-12 15:27
Modified
2024-11-14 14:34
Summary
Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 security update
Notes
Topic
An update for Red Hat JBoss SOA Platform 5.3.1 which fixes multiple
security issues is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss SOA Platform is the next-generation ESB and business process
automation infrastructure. Red Hat JBoss SOA Platform allows IT to leverage
existing (MoM and EAI), modern (SOA and BPM-Rules), and future (EDA and
CEP) integration methodologies to dramatically improve business process
execution speed and quality.
It was found that the code which checked that the server hostname matches
the domain name in a subject's Common Name (CN) field in X.509 certificates
was flawed. A man-in-the-middle attacker could use this flaw to spoof an
SSL server using a specially crafted X.509 certificate. (CVE-2012-6153,
CVE-2014-3577)
It was found that XStream could deserialize arbitrary user-supplied XML
content, representing objects of any type. A remote attacker able to pass
XML to XStream could use this flaw to perform a variety of attacks,
including remote code execution in the context of the server running the
XStream application. (CVE-2013-7285)
It was found that the secure processing feature of Xalan-Java had
insufficient restrictions defined for certain properties and features.
A remote attacker able to provide Extensible Stylesheet Language
Transformations (XSLT) content to be processed by an application using
Xalan-Java could use this flaw to bypass the intended constraints of the
secure processing feature. Depending on the components available in the
classpath, this could lead to arbitrary remote code execution in the
context of the application server running the application that uses
Xalan-Java. (CVE-2014-0107)
It was found that the org.jboss.seam.web.AuthenticationFilter class
implementation did not properly use Seam logging. A remote attacker could
send specially crafted authentication headers to an application, which
could result in arbitrary code execution with the privileges of the user
running that application. (CVE-2014-0248)
It was found that the implementation of the
org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method
provided a DocumentBuilderFactory that would expand entity references.
A remote, unauthenticated attacker could use this flaw to read files
accessible to the user running the application server, and potentially
perform other more advanced XXE attacks. (CVE-2014-3530)
It was discovered that the implementation used by the Not Yet Commons SSL
project to check that the server host name matches the domain name in the
subject's CN field was flawed. This could be exploited by a
man-in-the-middle attacker by spoofing a valid certificate using a
specially crafted subject. (CVE-2014-3604)
Red Hat would like to thank Alexander Papadakis for reporting
CVE-2014-3530. The CVE-2012-6153 issue was discovered by Florian Weimer of
Red Hat Product Security, the CVE-2014-3604 issue was discovered by Arun
Babu Neelicattu of Red Hat Product Security, and the CVE-2014-0248 issue
was discovered by Marek Schmidt of Red Hat.
All users of Red Hat JBoss SOA Platform 5.3.1 as provided from the Red Hat
Customer Portal are advised to apply this security update.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss SOA Platform 5.3.1 which fixes multiple\nsecurity issues is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss SOA Platform is the next-generation ESB and business process\nautomation infrastructure. Red Hat JBoss SOA Platform allows IT to leverage\nexisting (MoM and EAI), modern (SOA and BPM-Rules), and future (EDA and\nCEP) integration methodologies to dramatically improve business process\nexecution speed and quality.\n\nIt was found that the code which checked that the server hostname matches\nthe domain name in a subject\u0027s Common Name (CN) field in X.509 certificates\nwas flawed. A man-in-the-middle attacker could use this flaw to spoof an\nSSL server using a specially crafted X.509 certificate. (CVE-2012-6153,\nCVE-2014-3577)\n\nIt was found that XStream could deserialize arbitrary user-supplied XML\ncontent, representing objects of any type. A remote attacker able to pass\nXML to XStream could use this flaw to perform a variety of attacks,\nincluding remote code execution in the context of the server running the\nXStream application. (CVE-2013-7285)\n\nIt was found that the secure processing feature of Xalan-Java had\ninsufficient restrictions defined for certain properties and features.\nA remote attacker able to provide Extensible Stylesheet Language\nTransformations (XSLT) content to be processed by an application using\nXalan-Java could use this flaw to bypass the intended constraints of the\nsecure processing feature. Depending on the components available in the\nclasspath, this could lead to arbitrary remote code execution in the\ncontext of the application server running the application that uses\nXalan-Java. (CVE-2014-0107)\n\nIt was found that the org.jboss.seam.web.AuthenticationFilter class\nimplementation did not properly use Seam logging. A remote attacker could\nsend specially crafted authentication headers to an application, which\ncould result in arbitrary code execution with the privileges of the user\nrunning that application. (CVE-2014-0248)\n\nIt was found that the implementation of the\norg.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method\nprovided a DocumentBuilderFactory that would expand entity references.\nA remote, unauthenticated attacker could use this flaw to read files\naccessible to the user running the application server, and potentially\nperform other more advanced XXE attacks. (CVE-2014-3530)\n\nIt was discovered that the implementation used by the Not Yet Commons SSL\nproject to check that the server host name matches the domain name in the\nsubject\u0027s CN field was flawed. This could be exploited by a\nman-in-the-middle attacker by spoofing a valid certificate using a\nspecially crafted subject. (CVE-2014-3604)\n\nRed Hat would like to thank Alexander Papadakis for reporting\nCVE-2014-3530. The CVE-2012-6153 issue was discovered by Florian Weimer of\nRed Hat Product Security, the CVE-2014-3604 issue was discovered by Arun\nBabu Neelicattu of Red Hat Product Security, and the CVE-2014-0248 issue\nwas discovered by Marek Schmidt of Red Hat.\n\nAll users of Red Hat JBoss SOA Platform 5.3.1 as provided from the Red Hat\nCustomer Portal are advised to apply this security update.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1888",
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform\u0026downloadType=securityPatches\u0026version=5.3.1+GA",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform\u0026downloadType=securityPatches\u0026version=5.3.1+GA"
},
{
"category": "external",
"summary": "1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "1101619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101619"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131803"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1888.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 security update",
"tracking": {
"current_release_date": "2024-11-14T14:34:55+00:00",
"generator": {
"date": "2024-11-14T14:34:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:1888",
"initial_release_date": "2015-10-12T15:27:33+00:00",
"revision_history": [
{
"date": "2015-10-12T15:27:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:37:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:34:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss SOA Platform 5.3",
"product": {
"name": "Red Hat JBoss SOA Platform 5.3",
"product_id": "Red Hat JBoss SOA Platform 5.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_soa_platform:5.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss SOA Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-7285",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2013-12-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1051277"
}
],
"notes": [
{
"category": "description",
"text": "It was found that XStream could deserialize arbitrary user-supplied XML content, representing objects of any type. A remote attacker able to pass XML to XStream could use this flaw to perform a variety of attacks, including remote code execution in the context of the server running the XStream application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "XStream: remote code execution due to insecure XML deserialization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7285"
},
{
"category": "external",
"summary": "RHBZ#1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7285",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285"
},
{
"category": "external",
"summary": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html",
"url": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html"
},
{
"category": "external",
"summary": "http://xstream.codehaus.org/security.html",
"url": "http://xstream.codehaus.org/security.html"
},
{
"category": "external",
"summary": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/",
"url": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/"
}
],
"release_date": "2013-12-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "XStream: remote code execution due to insecure XML deserialization"
},
{
"cve": "CVE-2014-0107",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2014-03-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1080248"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the secure processing feature of Xalan-Java had insufficient restrictions defined for certain properties and features. A remote attacker able to provide Extensible Stylesheet Language Transformations (XSLT) content to be processed by an application using Xalan-Java could use this flaw to bypass the intended constraints of the secure processing feature. Depending on the components available in the classpath, this could lead to arbitrary remote code execution in the context of the application server running the application that uses Xalan-Java.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Xalan-Java: insufficient constraints in secure processing feature",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0107"
},
{
"category": "external",
"summary": "RHBZ#1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0107",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107"
},
{
"category": "external",
"summary": "http://www.ocert.org/advisories/ocert-2014-002.html",
"url": "http://www.ocert.org/advisories/ocert-2014-002.html"
}
],
"release_date": "2014-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Xalan-Java: insufficient constraints in secure processing feature"
},
{
"acknowledgments": [
{
"names": [
"Marek Schmidt"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0248",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1101619"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.jboss.seam.web.AuthenticationFilter class implementation did not properly use Seam logging. A remote attacker could send specially crafted authentication headers to an application, which could result in arbitrary code execution with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Seam: RCE via unsafe logging in AuthenticationFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0248"
},
{
"category": "external",
"summary": "RHBZ#1101619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0248",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0248"
}
],
"release_date": "2014-06-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Seam: RCE via unsafe logging in AuthenticationFilter"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"acknowledgments": [
{
"names": [
"Arun Babu Neelicattu"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3604",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131803"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject\u0027s CN field was flawed. This could be exploited by a man-in-the-middle attacker by spoofing a valid certificate using a specially crafted subject.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SSL: Hostname verification susceptible to MITM attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss SOA Platform 4 is now in Phase 3, Extended Life Support, of its life cycle. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss SOA Platform 5.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3604"
},
{
"category": "external",
"summary": "RHBZ#1131803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3604",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3604"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3604",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3604"
}
],
"release_date": "2014-08-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-10-12T15:27:33+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss SOA Platform installation (including its databases,\napplications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss SOA Platform server\nby stopping the JBoss Application Server process before installing this\nupdate, and then after installing the update, restart the Red Hat JBoss SOA\nPlatform server by starting the JBoss Application Server process.",
"product_ids": [
"Red Hat JBoss SOA Platform 5.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1888"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss SOA Platform 5.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "SSL: Hostname verification susceptible to MITM attack"
}
]
}
rhsa-2015_0851
Vulnerability from csaf_redhat
Published
2015-04-16 16:02
Modified
2024-11-14 14:34
Summary
Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 update
Notes
Topic
Red Hat JBoss BPM Suite 6.1.0, which fixes multiple security issues,
several bugs, and adds various enhancements, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BPM Suite is a business rules and processes management system
for the management, storage, creation, modification, and deployment of
JBoss rules and BPMN2-compliant business processes.
This release of Red Hat JBoss BPM Suite 6.1.0 serves as a replacement for
Red Hat JBoss BPM Suite 6.0.3, and includes bug fixes and enhancements.
Refer to the Red Hat JBoss BPM Suite 6.1.0 Release Notes for information on
the most significant of these changes. The Release Notes are available at
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws
handlers
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-7397 async-http-client: SSL/TLS certificate verification is
disabled under certain conditions
CVE-2013-7398 async-http-client: missing hostname verification for SSL
certificates
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid
SAML Tokens as valid
CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a
Symmetric EncryptBeforeSigning policy
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause
OOM errors
CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space
to fill
CVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7827 JBoss Security: Wrong security context loaded when using
SAML2 STS Login Module
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian
Weimer of Red Hat Product Security; the CVE-2014-8125 was discovered by
Jeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra
Lukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was
discovered by Richard Opalka and Arun Neelicattu of Red Hat.
All users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat
Customer Portal are advised to upgrade to Red Hat JBoss BPM Suite 6.1.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BPM Suite 6.1.0, which fixes multiple security issues,\nseveral bugs, and adds various enhancements, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BPM Suite is a business rules and processes management system\nfor the management, storage, creation, modification, and deployment of\nJBoss rules and BPMN2-compliant business processes.\n\nThis release of Red Hat JBoss BPM Suite 6.1.0 serves as a replacement for\nRed Hat JBoss BPM Suite 6.0.3, and includes bug fixes and enhancements.\nRefer to the Red Hat JBoss BPM Suite 6.1.0 Release Notes for information on\nthe most significant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-7397 async-http-client: SSL/TLS certificate verification is\ndisabled under certain conditions\n\nCVE-2013-7398 async-http-client: missing hostname verification for SSL\ncertificates\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content could cause temporary space\nto fill\n\nCVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7827 JBoss Security: Wrong security context loaded when using\nSAML2 STS Login Module\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nCVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian\nWeimer of Red Hat Product Security; the CVE-2014-8125 was discovered by\nJeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra\nLukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat.\n\nAll users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss BPM Suite 6.1.0.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0851",
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.1.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.1.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/"
},
{
"category": "external",
"summary": "969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "1160574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574"
},
{
"category": "external",
"summary": "1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "external",
"summary": "1169553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0851.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:34:03+00:00",
"generator": {
"date": "2024-11-14T14:34:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0851",
"initial_release_date": "2015-04-16T16:02:37+00:00",
"revision_history": [
{
"date": "2015-04-16T16:02:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:34:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BPMS 6.0",
"product": {
"name": "Red Hat JBoss BPMS 6.0",
"product_id": "Red Hat JBoss BPMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_bpms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Process Automation Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"acknowledgments": [
{
"names": [
"Richard Opalka"
]
},
{
"names": [
"Arun Neelicattu"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-2133",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2013-06-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "969924"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WS: EJB3 role restrictions are not applied to jaxws handlers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-2133"
},
{
"category": "external",
"summary": "RHBZ#969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2133"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133"
}
],
"release_date": "2013-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WS: EJB3 role restrictions are not applied to jaxws handlers"
},
{
"cve": "CVE-2013-4517",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1045257"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java: Java XML Signature DoS Attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4517"
},
{
"category": "external",
"summary": "RHBZ#1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517"
}
],
"release_date": "2013-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Java: Java XML Signature DoS Attack"
},
{
"cve": "CVE-2013-7397",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133769"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7397"
},
{
"category": "external",
"summary": "RHBZ#1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7397",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397"
}
],
"release_date": "2013-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions"
},
{
"cve": "CVE-2013-7398",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133773"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: missing hostname verification for SSL certificates",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7398"
},
{
"category": "external",
"summary": "RHBZ#1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7398",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7398"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398"
}
],
"release_date": "2013-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: missing hostname verification for SSL certificates"
},
{
"cve": "CVE-2014-0034",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093529"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0034"
},
{
"category": "external",
"summary": "RHBZ#1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid"
},
{
"cve": "CVE-2014-0035",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093530"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0035"
},
{
"category": "external",
"summary": "RHBZ#1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"cve": "CVE-2014-0109",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093526"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0109"
},
{
"category": "external",
"summary": "RHBZ#1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors"
},
{
"cve": "CVE-2014-0110",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Large invalid content could cause temporary space to fill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0110"
},
{
"category": "external",
"summary": "RHBZ#1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Large invalid content could cause temporary space to fill"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3623",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1157304"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3623"
},
{
"category": "external",
"summary": "RHBZ#1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623"
}
],
"release_date": "2014-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods"
},
{
"acknowledgments": [
{
"names": [
"Ondra Lukas"
],
"organization": "Red Hat Quality Engineering Team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7827",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2014-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1160574"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Wrong security context loaded when using SAML2 STS Login Module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7827"
},
{
"category": "external",
"summary": "RHBZ#1160574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827"
}
],
"release_date": "2015-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Wrong security context loaded when using SAML2 STS Login Module"
},
{
"cve": "CVE-2014-7839",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165328"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTeasy: External entities expanded by DocumentProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7839"
},
{
"category": "external",
"summary": "RHBZ#1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7839"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839"
}
],
"release_date": "2014-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTeasy: External entities expanded by DocumentProvider"
},
{
"acknowledgments": [
{
"names": [
"Rune Steinseth"
],
"organization": "JProfessionals"
}
],
"cve": "CVE-2014-8122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2014-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169237"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Weld: Limited information disclosure via stale thread state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8122"
},
{
"category": "external",
"summary": "RHBZ#1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8122"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122"
}
],
"release_date": "2014-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Weld: Limited information disclosure via stale thread state"
},
{
"acknowledgments": [
{
"names": [
"Jeremy Lindop"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-8125",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169553"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the jBPM runtime performed expansion of external parameter entities while executing BPMN2 files. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jBPM: BPMN2 file processing XXE in Process Execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8125"
},
{
"category": "external",
"summary": "RHBZ#1169553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8125",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8125"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125"
}
],
"release_date": "2014-12-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:37+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0851"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jBPM: BPMN2 file processing XXE in Process Execution"
}
]
}
rhsa-2014_1892
Vulnerability from csaf_redhat
Published
2014-11-24 20:46
Modified
2024-11-14 14:32
Summary
Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 update
Notes
Topic
Red Hat JBoss BPM Suite 6.0.3 roll up patch 1, which fixes two security
issues, several bugs, and adds various enhancements, is now available from
the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BPM Suite is a business rules and processes management system
for the management, storage, creation, modification, and deployment of
JBoss rules and BPMN2-compliant business processes.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss BPM
Suite 6.0.3, and includes bug fixes and enhancements. It includes various
bug fixes, which are listed in the README file included with the
patch files.
The following security issues are fixed with this release:
It was discovered that Jakarta Commons HttpClient incorrectly extracted the
host name from an X.509 certificate subject's Common Name (CN) field.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
All users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat
Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BPM Suite 6.0.3 roll up patch 1, which fixes two security\nissues, several bugs, and adds various enhancements, is now available from\nthe Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BPM Suite is a business rules and processes management system\nfor the management, storage, creation, modification, and deployment of\nJBoss rules and BPMN2-compliant business processes.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss BPM\nSuite 6.0.3, and includes bug fixes and enhancements. It includes various\nbug fixes, which are listed in the README file included with the\npatch files.\n\nThe following security issues are fixed with this release:\n\nIt was discovered that Jakarta Commons HttpClient incorrectly extracted the\nhost name from an X.509 certificate subject\u0027s Common Name (CN) field.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nAll users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat\nCustomer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1892",
"url": "https://access.redhat.com/errata/RHSA-2014:1892"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.0.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.0.3"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1892.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 update",
"tracking": {
"current_release_date": "2024-11-14T14:32:40+00:00",
"generator": {
"date": "2024-11-14T14:32:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1892",
"initial_release_date": "2014-11-24T20:46:11+00:00",
"revision_history": [
{
"date": "2014-11-24T20:46:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:33:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:32:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BPMS 6.0",
"product": {
"name": "Red Hat JBoss BPMS 6.0",
"product_id": "Red Hat JBoss BPMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_bpms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Process Automation Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-24T20:46:11+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1892"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-24T20:46:11+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1892"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2016_1773
Vulnerability from csaf_redhat
Published
2016-08-24 19:41
Modified
2024-11-14 15:36
Summary
Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update
Notes
Topic
An update is now available for Red Hat OpenShift Enterprise 2.2.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
OpenShift Enterprise by Red Hat is the company's cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or
private cloud deployments.
* The Jenkins continuous integration server has been updated to upstream
version 1.651.2 LTS that addresses a large number of security issues,
including open redirects, a potential denial of service, unsafe handling of
user provided environment variables and several instances of sensitive
information disclosure. (CVE-2014-3577, CVE-2016-0788, CVE-2016-0789,
CVE-2016-0790, CVE-2016-0791, CVE-2016-0792, CVE-2016-3721, CVE-2016-3722,
CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727,
CVE-2015-7501)
Space precludes documenting all of the bug fixes and enhancements in this
advisory. See the OpenShift Enterprise Technical Notes, which will be
updated shortly for release 2.2.10, for details about these changes:
https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/Technical_Notes/index.html
All OpenShift Enterprise 2 users are advised to upgrade to these updated
packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift Enterprise 2.2.\n\nRed Hat Product Security has rated this update as having a security impact \nof Important. A Common Vulnerability Scoring System (CVSS) base score, \nwhich gives a detailed severity rating, is available for each vulnerability \nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Enterprise by Red Hat is the company\u0027s cloud computing\nPlatform-as-a-Service (PaaS) solution designed for on-premise or\nprivate cloud deployments.\n\n* The Jenkins continuous integration server has been updated to upstream \nversion 1.651.2 LTS that addresses a large number of security issues, \nincluding open redirects, a potential denial of service, unsafe handling of\nuser provided environment variables and several instances of sensitive \ninformation disclosure. (CVE-2014-3577, CVE-2016-0788, CVE-2016-0789,\nCVE-2016-0790, CVE-2016-0791, CVE-2016-0792, CVE-2016-3721, CVE-2016-3722,\nCVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727,\nCVE-2015-7501)\n\nSpace precludes documenting all of the bug fixes and enhancements in this \nadvisory. See the OpenShift Enterprise Technical Notes, which will be \nupdated shortly for release 2.2.10, for details about these changes:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/Technical_Notes/index.html\n\nAll OpenShift Enterprise 2 users are advised to upgrade to these updated \npackages.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1773",
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1196783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196783"
},
{
"category": "external",
"summary": "1217403",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1217403"
},
{
"category": "external",
"summary": "1266239",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1266239"
},
{
"category": "external",
"summary": "1274852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274852"
},
{
"category": "external",
"summary": "1279330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1279330"
},
{
"category": "external",
"summary": "1282852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1282852"
},
{
"category": "external",
"summary": "1311722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311722"
},
{
"category": "external",
"summary": "1311946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311946"
},
{
"category": "external",
"summary": "1311947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311947"
},
{
"category": "external",
"summary": "1311948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311948"
},
{
"category": "external",
"summary": "1311949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311949"
},
{
"category": "external",
"summary": "1311950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311950"
},
{
"category": "external",
"summary": "1335415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335415"
},
{
"category": "external",
"summary": "1335416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335416"
},
{
"category": "external",
"summary": "1335417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335417"
},
{
"category": "external",
"summary": "1335418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335418"
},
{
"category": "external",
"summary": "1335420",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335420"
},
{
"category": "external",
"summary": "1335421",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335421"
},
{
"category": "external",
"summary": "1335422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335422"
},
{
"category": "external",
"summary": "1358938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1358938"
},
{
"category": "external",
"summary": "1361305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1361305"
},
{
"category": "external",
"summary": "1361306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1361306"
},
{
"category": "external",
"summary": "1361307",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1361307"
},
{
"category": "external",
"summary": "1362666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1362666"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1773.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-14T15:36:35+00:00",
"generator": {
"date": "2024-11-14T15:36:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2016:1773",
"initial_release_date": "2016-08-24T19:41:18+00:00",
"revision_history": [
{
"date": "2016-08-24T19:41:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-08-24T19:41:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T15:36:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise Node 2.2",
"product": {
"name": "Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:2.0::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise Infrastructure 2.2",
"product": {
"name": "Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:2.0::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise Client 2.2",
"product": {
"name": "Red Hat OpenShift Enterprise Client 2.2",
"product_id": "6Server-RHOSE-CLIENT-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:2.0::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Enterprise JBoss EAP add-on 2.2",
"product": {
"name": "Red Hat OpenShift Enterprise JBoss EAP add-on 2.2",
"product_id": "6Server-RHOSE-JBOSSEAP-2.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:2.0::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"product": {
"name": "ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"product_id": "ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ImageMagick-perl@6.7.2.7-5.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"product": {
"name": "ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"product_id": "ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.7.2.7-5.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"product": {
"name": "ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"product_id": "ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ImageMagick-devel@6.7.2.7-5.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"product": {
"name": "ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"product_id": "ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ImageMagick-doc@6.7.2.7-5.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"product": {
"name": "libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"product_id": "libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcgroup-pam@0.40.rc1-18.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"product": {
"name": "libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"product_id": "libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcgroup-debuginfo@0.40.rc1-18.el6_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product": {
"name": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product_id": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/activemq-client@5.9.0-6.redhat.611463.el6op?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product_id": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/activemq@5.9.0-6.redhat.611463.el6op?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "ImageMagick-0:6.7.2.7-5.el6_8.src",
"product": {
"name": "ImageMagick-0:6.7.2.7-5.el6_8.src",
"product_id": "ImageMagick-0:6.7.2.7-5.el6_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ImageMagick@6.7.2.7-5.el6_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "libcgroup-0:0.40.rc1-18.el6_8.src",
"product": {
"name": "libcgroup-0:0.40.rc1-18.el6_8.src",
"product_id": "libcgroup-0:0.40.rc1-18.el6_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcgroup@0.40.rc1-18.el6_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:1.651.2-1.el6op.src",
"product": {
"name": "jenkins-0:1.651.2-1.el6op.src",
"product_id": "jenkins-0:1.651.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@1.651.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.src",
"product": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.src",
"product_id": "activemq-0:5.9.0-6.redhat.611463.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/activemq@5.9.0-6.redhat.611463.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"product_id": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-frontend-haproxy-sni-proxy@0.5.2.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"product": {
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"product_id": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-node-proxy@1.26.3.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"product_id": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-admin-console@1.28.2.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"product_id": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-routing-daemon@0.26.6.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"product": {
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"product_id": "openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker@1.16.3.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"product": {
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"product_id": "openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-node-util@1.38.7.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rhc-0:1.38.7.1-1.el6op.src",
"product": {
"name": "rhc-0:1.38.7.1-1.el6op.src",
"product_id": "rhc-0:1.38.7.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@1.38.7.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-python@1.34.3.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby@1.32.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"product_id": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql@1.31.3.3-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins@1.29.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl@1.30.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-php@1.35.4.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron@1.25.4.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews@1.35.5.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"product_id": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client@1.26.1.1-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy@1.31.6.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-nodejs@1.33.1.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap@2.27.4.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mongodb@1.26.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"product_id": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy@1.26.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"product": {
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"product_id": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.30.2.2-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src",
"product_id": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.38.6.4-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"product_id": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.38.6.4-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"product": {
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"product_id": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-msg-broker-mcollective@1.36.2.4-1.el6op?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"product": {
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"product_id": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.37.6.2-1.el6op?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jenkins-0:1.651.2-1.el6op.noarch",
"product": {
"name": "jenkins-0:1.651.2-1.el6op.noarch",
"product_id": "jenkins-0:1.651.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@1.651.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-frontend-haproxy-sni-proxy@0.5.2.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"product": {
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"product_id": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-node-proxy@1.26.3.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-admin-console@1.28.2.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-routing-daemon@0.26.6.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"product_id": "openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker@1.16.3.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"product": {
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"product_id": "openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-node-util@1.38.7.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhc-0:1.38.7.1-1.el6op.noarch",
"product": {
"name": "rhc-0:1.38.7.1-1.el6op.noarch",
"product_id": "rhc-0:1.38.7.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@1.38.7.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-python@1.34.3.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby@1.32.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql@1.31.3.3-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins@1.29.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl@1.30.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-php@1.35.4.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron@1.25.4.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews@1.35.5.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client@1.26.1.1-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy@1.31.6.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-nodejs@1.33.1.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap@2.27.4.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-mongodb@1.26.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"product_id": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy@1.26.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"product_id": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.30.2.2-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.38.6.4-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.38.6.4-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"product": {
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"product_id": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-openshift-origin-msg-broker-mcollective@1.36.2.4-1.el6op?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"product": {
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"product_id": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.37.6.2-1.el6op?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-0:1.38.7.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Client 2.2",
"product_id": "6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch"
},
"product_reference": "rhc-0:1.38.7.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-CLIENT-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-0:1.38.7.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Client 2.2",
"product_id": "6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src"
},
"product_reference": "rhc-0:1.38.7.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-CLIENT-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src"
},
"product_reference": "activemq-0:5.9.0-6.redhat.611463.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64"
},
"product_reference": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64"
},
"product_reference": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-0:1.16.3.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src"
},
"product_reference": "openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src"
},
"product_reference": "openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure 2.2",
"product_id": "6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-INFRA-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise JBoss EAP add-on 2.2",
"product_id": "6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-JBOSSEAP-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src as a component of Red Hat OpenShift Enterprise JBoss EAP add-on 2.2",
"product_id": "6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-JBOSSEAP-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-0:6.7.2.7-5.el6_8.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src"
},
"product_reference": "ImageMagick-0:6.7.2.7-5.el6_8.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64"
},
"product_reference": "ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64"
},
"product_reference": "ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64"
},
"product_reference": "ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64"
},
"product_reference": "ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src"
},
"product_reference": "activemq-0:5.9.0-6.redhat.611463.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64"
},
"product_reference": "activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64"
},
"product_reference": "activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:1.651.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch"
},
"product_reference": "jenkins-0:1.651.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:1.651.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src"
},
"product_reference": "jenkins-0:1.651.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcgroup-0:0.40.rc1-18.el6_8.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src"
},
"product_reference": "libcgroup-0:0.40.rc1-18.el6_8.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64"
},
"product_reference": "libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64 as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64"
},
"product_reference": "libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch"
},
"product_reference": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src"
},
"product_reference": "openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch"
},
"product_reference": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src"
},
"product_reference": "openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch"
},
"product_reference": "openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-origin-node-util-0:1.38.7.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src"
},
"product_reference": "openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch"
},
"product_reference": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src as a component of Red Hat OpenShift Enterprise Node 2.2",
"product_id": "6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
},
"product_reference": "rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src",
"relates_to_product_reference": "6Server-RHOSE-NODE-2.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2015-7501",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"discovery_date": "2015-11-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1279330"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-commons-collections: InvokerTransformer code execution during deserialisation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Apache commons-collections library as shipped with Fuse 6.2.0 and A-MQ 6.2.0. However, this flaw is not known to be exploitable under supported scenarios in these product versions, and so has been assigned an impact of Important for these products and their respective errata.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-7501"
},
{
"category": "external",
"summary": "RHBZ#1279330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1279330"
},
{
"category": "external",
"summary": "RHSB-2045023",
"url": "https://access.redhat.com/solutions/2045023"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7501"
},
{
"category": "external",
"summary": "http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/",
"url": "http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/"
}
],
"release_date": "2015-11-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "apache-commons-collections: InvokerTransformer code execution during deserialisation"
},
{
"cve": "CVE-2016-0788",
"discovery_date": "2016-02-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311946"
}
],
"notes": [
{
"category": "description",
"text": "The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Remote code execution vulnerability in remoting module (SECURITY-232)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0788"
},
{
"category": "external",
"summary": "RHBZ#1311946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0788",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0788"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24"
}
],
"release_date": "2016-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Remote code execution vulnerability in remoting module (SECURITY-232)"
},
{
"cve": "CVE-2016-0789",
"discovery_date": "2016-02-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311947"
}
],
"notes": [
{
"category": "description",
"text": "CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: HTTP response splitting vulnerability (SECURITY-238)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0789"
},
{
"category": "external",
"summary": "RHBZ#1311947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0789",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0789"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24"
}
],
"release_date": "2016-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: HTTP response splitting vulnerability (SECURITY-238)"
},
{
"cve": "CVE-2016-0790",
"discovery_date": "2016-02-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311948"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Non-constant time comparison of API token (SECURITY-241)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0790"
},
{
"category": "external",
"summary": "RHBZ#1311948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0790",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0790"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24"
}
],
"release_date": "2016-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Non-constant time comparison of API token (SECURITY-241)"
},
{
"cve": "CVE-2016-0791",
"discovery_date": "2016-02-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311949"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0791"
},
{
"category": "external",
"summary": "RHBZ#1311949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0791",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0791"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24"
}
],
"release_date": "2016-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245)"
},
{
"cve": "CVE-2016-0792",
"discovery_date": "2016-02-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311950"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Remote code execution through remote API (SECURITY-247)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0792"
},
{
"category": "external",
"summary": "RHBZ#1311950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0792",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0792"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24"
}
],
"release_date": "2016-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Remote code execution through remote API (SECURITY-247)"
},
{
"cve": "CVE-2016-3721",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335415"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3721"
},
{
"category": "external",
"summary": "RHBZ#1335415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3721",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3721"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170)"
},
{
"cve": "CVE-2016-3722",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335416"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the \"full name.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Malicious users with multiple user accounts can prevent other users from logging in (SECURITY-243)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3722"
},
{
"category": "external",
"summary": "RHBZ#1335416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3722",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3722"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3722",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3722"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jenkins: Malicious users with multiple user accounts can prevent other users from logging in (SECURITY-243)"
},
{
"cve": "CVE-2016-3723",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335417"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Information on installed plugins exposed via API (SECURITY-250)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3723"
},
{
"category": "external",
"summary": "RHBZ#1335417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3723",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3723"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3723",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3723"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Information on installed plugins exposed via API (SECURITY-250)"
},
{
"cve": "CVE-2016-3724",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335418"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3724"
},
{
"category": "external",
"summary": "RHBZ#1335418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335418"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3724",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3724"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266)"
},
{
"cve": "CVE-2016-3725",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335420"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Regular users can trigger download of update site metadata (SECURITY-273)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3725"
},
{
"category": "external",
"summary": "RHBZ#1335420",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335420"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3725",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3725"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3725",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3725"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jenkins: Regular users can trigger download of update site metadata (SECURITY-273)"
},
{
"cve": "CVE-2016-3726",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335421"
}
],
"notes": [
{
"category": "description",
"text": "Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to \"scheme-relative\" URLs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Open redirect to scheme-relative URLs (SECURITY-276)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3726"
},
{
"category": "external",
"summary": "RHBZ#1335421",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335421"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3726",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3726"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Open redirect to scheme-relative URLs (SECURITY-276)"
},
{
"cve": "CVE-2016-3727",
"discovery_date": "2016-05-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1335422"
}
],
"notes": [
{
"category": "description",
"text": "The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Granting the permission to read node configurations allows access to overall system configuration (SECURITY-281)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3727"
},
{
"category": "external",
"summary": "RHBZ#1335422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335422"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3727",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3727"
},
{
"category": "external",
"summary": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11",
"url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
}
],
"release_date": "2016-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-08-24T19:41:18+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nSee the OpenShift Enterprise 2.2 Release Notes, which will be updated \nshortly for release 2.2.10, for important instructions on how to fully \napply this asynchronous errata update:\n\nhttps://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates\n\nThis update is available via the Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1773"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-0:1.16.3.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.6.2-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op.src",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.noarch",
"6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op.src",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.noarch",
"6Server-RHOSE-JBOSSEAP-2.2:openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-0:6.7.2.7-5.el6_8.src",
"6Server-RHOSE-NODE-2.2:ImageMagick-debuginfo-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-devel-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-doc-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:ImageMagick-perl-0:6.7.2.7-5.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.src",
"6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611463.el6op.x86_64",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:jenkins-0:1.651.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:libcgroup-0:0.40.rc1-18.el6_8.src",
"6Server-RHOSE-NODE-2.2:libcgroup-debuginfo-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:libcgroup-pam-0:0.40.rc1-18.el6_8.x86_64",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.4.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.3.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.3.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.7.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op.src",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.noarch",
"6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.6.4-1.el6op.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Granting the permission to read node configurations allows access to overall system configuration (SECURITY-281)"
}
]
}
rhsa-2014_1836
Vulnerability from csaf_redhat
Published
2014-11-10 19:25
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Application Platform 5.2.0 that
fixes two security issues is now available from the Red Hat Customer
Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications, which integrates the JBoss Application Server with JBoss
Hibernate and JBoss Seam.
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 5.2.0 as
provided from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Application Platform 5.2.0 that\nfixes two security issues is now available from the Red Hat Customer\nPortal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications, which integrates the JBoss Application Server with JBoss\nHibernate and JBoss Seam.\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 5.2.0 as\nprovided from the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1836",
"url": "https://access.redhat.com/errata/RHSA-2014:1836"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=5.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=5.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1836.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:35+00:00",
"generator": {
"date": "2024-11-14T14:31:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1836",
"initial_release_date": "2014-11-10T19:25:46+00:00",
"revision_history": [
{
"date": "2014-11-10T19:25:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-10T19:25:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5.2",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5.2",
"product_id": "Red Hat JBoss Enterprise Application Platform 5.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:46+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Application Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1836"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:46+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Application Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1836"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_0234
Vulnerability from csaf_redhat
Published
2015-02-17 22:27
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 security update
Notes
Topic
Red Hat JBoss BPM Suite 6.0.3 roll up patch 2, which fixes multiple
security issues, several bugs, and adds various enhancements, is now
available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BPM Suite is a business rules and processes management system
for the management, storage, creation, modification, and deployment of
JBoss rules and BPMN2-compliant business processes.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss BPM
Suite 6.0.3, and includes bug fixes and enhancements. It includes various
bug fixes, which are listed in the README file included with the patch
files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client: SSL hostname verification
bypass, incomplete CVE-2012-6153 fix
CVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service
(JAXP, 8017298)
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and
modification of application server configuration and state by application
CVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied
XSLTs
CVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious
content length header
CVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web
application
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter
CVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller
role check implementation
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via
ReflectionHelper
CVE-2014-3578 spring: Spring Framework: Directory traversal
CVE-2014-3625 spring: Spring Framework: directory traversal flaw
CVE-2014-3682 jbpm-designer: XXE in BPMN2 import
CVE-2014-8114 UberFire: Information disclosure and RCE via insecure file
upload/download servlets
CVE-2014-8115 KIE Workbench: Insufficient authorization constraints
Red Hat would like to thank James Roper of Typesafe for reporting the
CVE-2014-0193 issue, CA Technologies for reporting the CVE-2014-3472 issue,
Alexander Papadakis for reporting the CVE-2014-3530 issue, and David Jorm
for reporting the CVE-2014-8114 and CVE-2014-8115 issues. The CVE-2012-6153
issue was discovered by Florian Weimer of Red Hat Product Security; the
CVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP
Quality Engineering team; the CVE-2014-0075, CVE-2014-3490, and
CVE-2014-3682 issues were discovered by David Jorm of Red Hat Product
Security.
All users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat
Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BPM Suite 6.0.3 roll up patch 2, which fixes multiple\nsecurity issues, several bugs, and adds various enhancements, is now\navailable from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BPM Suite is a business rules and processes management system\nfor the management, storage, creation, modification, and deployment of\nJBoss rules and BPMN2-compliant business processes.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss BPM\nSuite 6.0.3, and includes bug fixes and enhancements. It includes various\nbug fixes, which are listed in the README file included with the patch\nfiles.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-6153 fix\n\nCVE-2013-4002 xerces-j2: Xerces-J2 OpenJDK: XML parsing Denial of Service\n(JAXP, 8017298)\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0005 security: PicketBox/JBossSX: Unauthorized access to and\nmodification of application server configuration and state by application\n\nCVE-2014-0075 jbossweb: tomcat: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0096 jbossweb: Apache Tomcat: XXE vulnerability via user supplied\nXSLTs\n\nCVE-2014-0099 jbossweb: Apache Tomcat: Request smuggling via malicious\ncontent length header\n\nCVE-2014-0119 jbossweb: Apache Tomcat 6: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter\n\nCVE-2014-3472 jboss-as-controller: JBoss AS Security: Invalid EJB caller\nrole check implementation\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3558 hibernate-validator: Hibernate Validator: JSM bypass via\nReflectionHelper\n\nCVE-2014-3578 spring: Spring Framework: Directory traversal\n\nCVE-2014-3625 spring: Spring Framework: directory traversal flaw\n\nCVE-2014-3682 jbpm-designer: XXE in BPMN2 import\n\nCVE-2014-8114 UberFire: Information disclosure and RCE via insecure file\nupload/download servlets\n\nCVE-2014-8115 KIE Workbench: Insufficient authorization constraints\n\nRed Hat would like to thank James Roper of Typesafe for reporting the\nCVE-2014-0193 issue, CA Technologies for reporting the CVE-2014-3472 issue,\nAlexander Papadakis for reporting the CVE-2014-3530 issue, and David Jorm\nfor reporting the CVE-2014-8114 and CVE-2014-8115 issues. The CVE-2012-6153\nissue was discovered by Florian Weimer of Red Hat Product Security; the\nCVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP\nQuality Engineering team; the CVE-2014-0075, CVE-2014-3490, and\nCVE-2014-3682 issues were discovered by David Jorm of Red Hat Product\nSecurity.\n\nAll users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat\nCustomer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0234",
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.0.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.0.3"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "1148260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148260"
},
{
"category": "external",
"summary": "1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "external",
"summary": "1169544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169544"
},
{
"category": "external",
"summary": "1169545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169545"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0234.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 security update",
"tracking": {
"current_release_date": "2024-11-14T14:33:40+00:00",
"generator": {
"date": "2024-11-14T14:33:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0234",
"initial_release_date": "2015-02-17T22:27:47+00:00",
"revision_history": [
{
"date": "2015-02-17T22:27:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BPMS 6.0",
"product": {
"name": "Red Hat JBoss BPMS 6.0",
"product_id": "Red Hat JBoss BPMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_bpms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Process Automation Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0005",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2014-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1049736"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0005"
},
{
"category": "external",
"summary": "RHBZ#1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005"
}
],
"release_date": "2014-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3558",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2014-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120495"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the implementation of org.hibernate.validator.util.ReflectionHelper together with the permissions required to run Hibernate Validator under the Java Security Manager could allow a malicious application deployed in the same application container to execute several actions with escalated privileges, which might otherwise not be possible. This flaw could be used to perform various attacks, including but not restricted to, arbitrary code execution in systems that are otherwise secured by the Java Security Manager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Validator: JSM bypass via ReflectionHelper",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3558"
},
{
"category": "external",
"summary": "RHBZ#1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3558",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558"
}
],
"release_date": "2014-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Validator: JSM bypass via ReflectionHelper"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3578",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-08-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131882"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: Directory traversal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3578"
},
{
"category": "external",
"summary": "RHBZ#1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3578",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578"
},
{
"category": "external",
"summary": "http://www.pivotal.io/security/cve-2014-3578",
"url": "http://www.pivotal.io/security/cve-2014-3578"
},
{
"category": "external",
"summary": "https://jvn.jp/en/jp/JVN49154900/",
"url": "https://jvn.jp/en/jp/JVN49154900/"
}
],
"release_date": "2014-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: Directory traversal"
},
{
"cve": "CVE-2014-3625",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165936"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the way the Spring Framework sanitized certain URLs. A remote attacker could use this flaw to obtain any file on the file system that was also accessible to the process in which the Spring web application was running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: directory traversal flaw",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3625"
},
{
"category": "external",
"summary": "RHBZ#1165936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3625",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3625"
}
],
"release_date": "2014-11-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: directory traversal flaw"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3682",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-10-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1148260"
}
],
"notes": [
{
"category": "description",
"text": "An XML External Entity (XXE) flaw was found in the jbpm-designer BPMN2 import function. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jbpm-designer: XXE in BPMN2 import",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3682"
},
{
"category": "external",
"summary": "RHBZ#1148260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1148260"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3682",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3682"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3682",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3682"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jbpm-designer: XXE in BPMN2 import"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
]
}
],
"cve": "CVE-2014-8114",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-11-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169544"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the default implementation of FileUploadServlet and FileDownloadServlet provided by the UberFire Framework did not restrict the paths to which a file could be written or read from. In applications using this framework and exposing these servlets, a remote attacker could gain access to information stored in files accessible to the application container process, or execute arbitrary code by uploading malicious content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "UberFire: Information disclosure and RCE via insecure file upload/download servlets",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8114"
},
{
"category": "external",
"summary": "RHBZ#1169544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169544"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8114",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8114"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "UberFire: Information disclosure and RCE via insecure file upload/download servlets"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
]
}
],
"cve": "CVE-2014-8115",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2014-11-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169545"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the default authorization constrains applied on servelets deployed in the KIE Workbench application were insufficient. A remote, authenticated user without sufficient privileges could use this flaw to upload or download arbitrary files, perform privileged actions that otherwise cannot be accessed, or perform other more complex attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Workbench: Insufficient authorization constraints",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5 is now in Phase 3, Extended Life Support, of its life cycle. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BPMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8115"
},
{
"category": "external",
"summary": "RHBZ#1169545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8115",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8115"
}
],
"release_date": "2015-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-17T22:27:47+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BPMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BPMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Workbench: Insufficient authorization constraints"
}
]
}
rhsa-2014_1834
Vulnerability from csaf_redhat
Published
2014-11-10 19:25
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Notes
Topic
Updated packages for Red Hat JBoss Enterprise Application Platform 5.2.0
that fix two security issues are now available for Red Hat Enterprise Linux
4, 5, and 6.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications, which integrates the JBoss Application Server with JBoss
Hibernate and JBoss Seam.
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages for Red Hat JBoss Enterprise Application Platform 5.2.0\nthat fix two security issues are now available for Red Hat Enterprise Linux\n4, 5, and 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications, which integrates the JBoss Application Server with JBoss\nHibernate and JBoss Seam.\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 5.2.0 on Red Hat\nEnterprise Linux 4, 5, and 6 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1834",
"url": "https://access.redhat.com/errata/RHSA-2014:1834"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1834.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:23+00:00",
"generator": {
"date": "2024-11-14T14:31:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1834",
"initial_release_date": "2014-11-10T19:25:56+00:00",
"revision_history": [
{
"date": "2014-11-10T19:25:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-10T19:25:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el4"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product_id": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.2.12-14.patch_09.ep5.el4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.2.12-14.patch_09.el6.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
},
"product_reference": "apache-cxf-0:2.2.12-14.patch_09.el6.src",
"relates_to_product_reference": "6Server-JBEAP-5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:56+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Application Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1834"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-10T19:25:56+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Application Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1834"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4AS-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.noarch",
"4ES-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el4.src",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.noarch",
"5Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.ep5.el5.src",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.noarch",
"6Server-JBEAP-5:apache-cxf-0:2.2.12-14.patch_09.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1082
Vulnerability from csaf_redhat
Published
2014-08-20 10:39
Modified
2024-11-14 14:30
Summary
Red Hat Security Advisory: thermostat1-httpcomponents-client security update
Notes
Topic
Updated thermostat1-httpcomponents-client packages that fix one security
issue are now available for Red Hat Software Collections 1.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
[Updated 25 August 2014]
This erratum previously incorrectly listed the CVE-2012-6153 issue as
addressed by this update. However, that issue did not affect the
thermostat1-httpcomponents-client packages.
Details
Thermostat is a monitoring and instrumentation tool for the OpenJDK HotSpot
Java Virtual Machine (JVM) with support for monitoring multiple
JVM instances.
The httpcomponents-client package provides an HTTP agent implementation
that is used by Thermostat to visualize collected data in an HTTP-aware
client application.
It was found that the fix for CVE-2012-6153 was incomplete: the code added
to check that the server hostname matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2014-3577)
For additional information on this flaw, refer to the Knowledgebase
article in the References section.
All thermostat1-httpcomponents-client users are advised to upgrade to these
updated packages, which contain a backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated thermostat1-httpcomponents-client packages that fix one security\nissue are now available for Red Hat Software Collections 1.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.\n\n[Updated 25 August 2014]\nThis erratum previously incorrectly listed the CVE-2012-6153 issue as\naddressed by this update. However, that issue did not affect the\nthermostat1-httpcomponents-client packages.",
"title": "Topic"
},
{
"category": "general",
"text": "Thermostat is a monitoring and instrumentation tool for the OpenJDK HotSpot\nJava Virtual Machine (JVM) with support for monitoring multiple\nJVM instances.\n\nThe httpcomponents-client package provides an HTTP agent implementation\nthat is used by Thermostat to visualize collected data in an HTTP-aware\nclient application.\n\nIt was found that the fix for CVE-2012-6153 was incomplete: the code added\nto check that the server hostname matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2014-3577)\n\nFor additional information on this flaw, refer to the Knowledgebase\narticle in the References section.\n\nAll thermostat1-httpcomponents-client users are advised to upgrade to these\nupdated packages, which contain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1082",
"url": "https://access.redhat.com/errata/RHSA-2014:1082"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1082.json"
}
],
"title": "Red Hat Security Advisory: thermostat1-httpcomponents-client security update",
"tracking": {
"current_release_date": "2024-11-14T14:30:38+00:00",
"generator": {
"date": "2024-11-14T14:30:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1082",
"initial_release_date": "2014-08-20T10:39:58+00:00",
"revision_history": [
{
"date": "2014-08-20T10:39:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-08-25T16:43:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:30:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.1-6.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"product": {
"name": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"product_id": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thermostat1-httpcomponents-client-javadoc@4.2.5-3.4.el6.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"product": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"product_id": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thermostat1-httpcomponents-client@4.2.5-3.4.el6.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"product": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"product_id": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thermostat1-httpcomponents-client@4.2.5-3.4.el6.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.1-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"relates_to_product_reference": "6Server-RHSCL-1.1-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.1-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"relates_to_product_reference": "6Server-RHSCL-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src"
},
"product_reference": "thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"relates_to_product_reference": "6Workstation-RHSCL-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
},
"product_reference": "thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-20T10:39:58+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1082"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1-6.4.Z:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Server-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.noarch",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1.src",
"6Workstation-RHSCL-1.1:thermostat1-httpcomponents-client-javadoc-0:4.2.5-3.4.el6.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1320
Vulnerability from csaf_redhat
Published
2014-09-29 20:11
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Notes
Topic
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix
two security issues are now available for Red Hat Enterprise Linux 4, 5,
and 6.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Web Platform is a platform for Java applications,
which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Web Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix\ntwo security issues are now available for Red Hat Enterprise Linux 4, 5,\nand 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Web Platform is a platform for Java applications,\nwhich integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Web Platform 5.2.0 on Red Hat\nEnterprise Linux 4, 5, and 6 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1320",
"url": "https://access.redhat.com/errata/RHSA-2014:1320"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1320.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:37+00:00",
"generator": {
"date": "2024-11-14T14:31:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1320",
"initial_release_date": "2014-09-29T20:11:40+00:00",
"revision_history": [
{
"date": "2014-09-29T20:11:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-29T20:11:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el4"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product": {
"name": "Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_platform:5::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.el6_5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el4?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.el6_5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el4?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEWP-5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"known_not_affected": [
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:11:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Web Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1320"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"known_not_affected": [
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:11:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Web Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1320"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEWP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEWP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEWP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1323
Vulnerability from csaf_redhat
Published
2014-09-29 20:22
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Application Platform 5.2.0 that
fixes two security issues is now available from the Red Hat Customer
Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications, which integrates the JBoss Application Server with JBoss
Hibernate and JBoss Seam.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 5.2.0 as
provided from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Application Platform 5.2.0 that\nfixes two security issues is now available from the Red Hat Customer\nPortal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications, which integrates the JBoss Application Server with JBoss\nHibernate and JBoss Seam.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 5.2.0 as\nprovided from the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1323",
"url": "https://access.redhat.com/errata/RHSA-2014:1323"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=5.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=5.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1323.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:52+00:00",
"generator": {
"date": "2024-11-14T14:31:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1323",
"initial_release_date": "2014-09-29T20:22:10+00:00",
"revision_history": [
{
"date": "2014-09-29T20:22:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-29T20:22:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5.2",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5.2",
"product_id": "Red Hat JBoss Enterprise Application Platform 5.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:22:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Application Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1323"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:22:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting JBoss Enterprise Application Platform installation (including all\napplications and configuration files).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 5.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1323"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 5.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_0675
Vulnerability from csaf_redhat
Published
2015-03-11 16:51
Modified
2024-11-14 14:34
Summary
Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.1.0 update
Notes
Topic
Red Hat JBoss Data Virtualization 6.1.0, which fixes multiple security
issues and various bugs, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Data Virtualization is a lean data integration solution that
provides easy, real-time, and unified data access across disparate sources
to multiple applications and users. JBoss Data Virtualization makes data
spread across physically distinct systems—such as multiple databases, XML
files, and even Hadoop systems—appear as a set of tables in a local
database.
The release of Red Hat JBoss Data Virtualization 6.1.0 serves as a
replacement for Red Hat JBoss Data Virtualization 6.0.0. It includes
various bug fixes, which are listed in the README file included with the
patch files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,
8017298)
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs
CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content
length header
CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web
application
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal
Entity (XXE)
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
Red Hat would like to thank James Roper of Typesafe for reporting
CVE-2014-0193, Alexander Papadakis for reporting CVE-2014-3530, and Rune
Steinseth of JProfessionals for reporting CVE-2014-8122. The CVE-2012-6153
issue was discovered by Florian Weimer of Red Hat Product Security, the
CVE-2014-0075 and CVE-2014-3490 issues were discovered by David Jorm of Red
Hat Product Security, and the CVE-2014-3481 issue was discovered by the Red
Hat JBoss Enterprise Application Platform QE team.
All users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the
Red Hat Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Data Virtualization 6.1.0, which fixes multiple security\nissues and various bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Data Virtualization is a lean data integration solution that\nprovides easy, real-time, and unified data access across disparate sources\nto multiple applications and users. JBoss Data Virtualization makes data\nspread across physically distinct systems\u2014such as multiple databases, XML\nfiles, and even Hadoop systems\u2014appear as a set of tables in a local\ndatabase.\n\nThe release of Red Hat JBoss Data Virtualization 6.1.0 serves as a\nreplacement for Red Hat JBoss Data Virtualization 6.0.0. It includes\nvarious bug fixes, which are listed in the README file included with the\npatch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,\n8017298)\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content\nlength header\n\nCVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal\nEntity (XXE)\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, Alexander Papadakis for reporting CVE-2014-3530, and Rune\nSteinseth of JProfessionals for reporting CVE-2014-8122. The CVE-2012-6153\nissue was discovered by Florian Weimer of Red Hat Product Security, the\nCVE-2014-0075 and CVE-2014-3490 issues were discovered by David Jorm of Red\nHat Product Security, and the CVE-2014-3481 issue was discovered by the Red\nHat JBoss Enterprise Application Platform QE team.\n\nAll users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the\nRed Hat Customer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0675",
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=distributions\u0026version=6.1.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=distributions\u0026version=6.1.0"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0675.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.1.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:34:21+00:00",
"generator": {
"date": "2024-11-14T14:34:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0675",
"initial_release_date": "2015-03-11T16:51:20+00:00",
"revision_history": [
{
"date": "2015-03-11T16:51:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:34:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Data Virtualization 6.1",
"product": {
"name": "Red Hat JBoss Data Virtualization 6.1",
"product_id": "Red Hat JBoss Data Virtualization 6.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_virtualization:6.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Data Virtualization"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-4517",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1045257"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java: Java XML Signature DoS Attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4517"
},
{
"category": "external",
"summary": "RHBZ#1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517"
}
],
"release_date": "2013-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Java: Java XML Signature DoS Attack"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3578",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2014-08-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131882"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Framework: Directory traversal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3578"
},
{
"category": "external",
"summary": "RHBZ#1131882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3578",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578"
},
{
"category": "external",
"summary": "http://www.pivotal.io/security/cve-2014-3578",
"url": "http://www.pivotal.io/security/cve-2014-3578"
},
{
"category": "external",
"summary": "https://jvn.jp/en/jp/JVN49154900/",
"url": "https://jvn.jp/en/jp/JVN49154900/"
}
],
"release_date": "2014-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Framework: Directory traversal"
},
{
"cve": "CVE-2014-3623",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1157304"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3623"
},
{
"category": "external",
"summary": "RHBZ#1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623"
}
],
"release_date": "2014-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods"
},
{
"cve": "CVE-2014-7839",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165328"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTeasy: External entities expanded by DocumentProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7839"
},
{
"category": "external",
"summary": "RHBZ#1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7839"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839"
}
],
"release_date": "2014-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTeasy: External entities expanded by DocumentProvider"
},
{
"acknowledgments": [
{
"names": [
"Rune Steinseth"
],
"organization": "JProfessionals"
}
],
"cve": "CVE-2014-8122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2014-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169237"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Weld: Limited information disclosure via stale thread state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8122"
},
{
"category": "external",
"summary": "RHBZ#1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8122"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122"
}
],
"release_date": "2014-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-11T16:51:20+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0675"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Weld: Limited information disclosure via stale thread state"
}
]
}
rhsa-2014_1321
Vulnerability from csaf_redhat
Published
2014-09-29 20:22
Modified
2024-11-14 14:31
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Notes
Topic
Updated packages for Red Hat JBoss Enterprise Application Platform 5.2.0
that fix two security issues are now available for Red Hat Enterprise Linux
4, 5, and 6.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications, which integrates the JBoss Application Server with JBoss
Hibernate and JBoss Seam.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages for Red Hat JBoss Enterprise Application Platform 5.2.0\nthat fix two security issues are now available for Red Hat Enterprise Linux\n4, 5, and 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications, which integrates the JBoss Application Server with JBoss\nHibernate and JBoss Seam.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 5.2.0 on Red Hat\nEnterprise Linux 4, 5, and 6 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1321",
"url": "https://access.redhat.com/errata/RHSA-2014:1321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1321.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:31:42+00:00",
"generator": {
"date": "2024-11-14T14:31:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1321",
"initial_release_date": "2014-09-29T20:22:16+00:00",
"revision_history": [
{
"date": "2014-09-29T20:22:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-29T20:22:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:31:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el4"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el4"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:5::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.ep5.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el4?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.ep5.el4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.el6_5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-examples@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-docs@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2-runtime@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.ep5.el4?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.ep5.el4?arch=src"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product_id": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-4_patch_02.el6_5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product_id": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-seam2@2.2.6.EAP5-22_patch_01.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS",
"product_id": "4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4AS-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES",
"product_id": "4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"relates_to_product_reference": "4ES-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server",
"product_id": "5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src"
},
"product_reference": "jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server",
"product_id": "6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
},
"product_reference": "jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:22:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Application Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1321"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-29T20:22:16+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up your existing Red\nHat JBoss Enterprise Application Platform 5 installation (including all\napplications and configuration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1321"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4AS-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4AS-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4AS-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.noarch",
"4ES-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4.src",
"4ES-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"4ES-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el4.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.noarch",
"5Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5.src",
"5Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"5Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.ep5.el5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.noarch",
"6Server-JBEAP-5:jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5.src",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6.src",
"6Server-JBEAP-5:jboss-seam2-docs-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-examples-0:2.2.6.EAP5-22_patch_01.el6.noarch",
"6Server-JBEAP-5:jboss-seam2-runtime-0:2.2.6.EAP5-22_patch_01.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_1177
Vulnerability from csaf_redhat
Published
2015-06-23 16:52
Modified
2024-11-14 14:34
Summary
Red Hat Security Advisory: Red Hat JBoss A-MQ 6.2.0 update
Notes
Topic
Red Hat JBoss A-MQ 6.2.0, which fixes multiple security issues, several
bugs, and adds various enhancements, is now available from the Red Hat
Customer Portal.
Red Hat Product Security has rated this update as having Important
security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards-compliant
messaging system that is tailored for use in mission critical applications.
Red Hat JBoss A-MQ 6.2.0 is a minor product release that updates Red Hat
JBoss A-MQ 6.1.0 and includes several bug fixes and enhancements. Refer to
the Release Notes document, available from the link in the References
section, for a list of changes.
The following security issues are resolved with this update:
It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate. (CVE-2014-3577)
It was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions. (CVE-2014-8175)
It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226)
It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227)
It was found that PKIX trust components allowed an X509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority. (CVE-2015-1796)
The CVE-2014-8175 issue was reported by Jay Kumar SenSharma of Red Hat.
All users of Red Hat JBoss A-MQ 6.1.0 as provided from the Red Hat Customer
Portal are advised to apply this update.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss A-MQ 6.2.0, which fixes multiple security issues, several\nbugs, and adds various enhancements, is now available from the Red Hat\nCustomer Portal.\n\nRed Hat Product Security has rated this update as having Important\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards-compliant\nmessaging system that is tailored for use in mission critical applications.\n\nRed Hat JBoss A-MQ 6.2.0 is a minor product release that updates Red Hat\nJBoss A-MQ 6.1.0 and includes several bug fixes and enhancements. Refer to\nthe Release Notes document, available from the link in the References\nsection, for a list of changes.\n\nThe following security issues are resolved with this update:\n\nIt was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate. (CVE-2014-3577)\n\nIt was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions. (CVE-2014-8175)\n\nIt was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226)\n\nIt was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227)\n\nIt was found that PKIX trust components allowed an X509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority. (CVE-2015-1796)\n\nThe CVE-2014-8175 issue was reported by Jay Kumar SenSharma of Red Hat.\n\nAll users of Red Hat JBoss A-MQ 6.1.0 as provided from the Red Hat Customer\nPortal are advised to apply this update.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1177",
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq\u0026downloadType=distributions\u0026version=6.2.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq\u0026downloadType=distributions\u0026version=6.2.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_A-MQ/",
"url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_A-MQ/"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "1196619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196619"
},
{
"category": "external",
"summary": "1205112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1205112"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1177.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss A-MQ 6.2.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:34:13+00:00",
"generator": {
"date": "2024-11-14T14:34:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:1177",
"initial_release_date": "2015-06-23T16:52:10+00:00",
"revision_history": [
{
"date": "2015-06-23T16:52:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:34:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss A-MQ 6.2",
"product": {
"name": "Red Hat JBoss A-MQ 6.2",
"product_id": "Red Hat JBoss A-MQ 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_amq:6.2.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss AMQ"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"acknowledgments": [
{
"names": [
"Jay Kumar SenSharma"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-8175",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2015-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1205112"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Fuse would allow any user defined in the users.properties file to access the HawtIO console without having a valid admin role. This could allow a remote attacker to bypass intended authentication HawtIO console access restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Fuse: insufficient access permissions checks when accessing Hawtio console",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8175"
},
{
"category": "external",
"summary": "RHBZ#1205112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1205112"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8175",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8175"
}
],
"release_date": "2015-06-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Fuse: insufficient access permissions checks when accessing Hawtio console"
},
{
"cve": "CVE-2015-0226",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191446"
}
],
"notes": [
{
"category": "description",
"text": "It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0226"
},
{
"category": "external",
"summary": "RHBZ#1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)"
},
{
"cve": "CVE-2015-0227",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191451"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0227"
},
{
"category": "external",
"summary": "RHBZ#1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property"
},
{
"cve": "CVE-2015-1796",
"discovery_date": "2015-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1196619"
}
],
"notes": [
{
"category": "description",
"text": "It was found that PKIX trust components allowed an X.509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss A-MQ 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1796"
},
{
"category": "external",
"summary": "RHBZ#1196619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1796",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1796"
},
{
"category": "external",
"summary": "http://shibboleth.net/community/advisories/secadv_20150225.txt",
"url": "http://shibboleth.net/community/advisories/secadv_20150225.txt"
}
],
"release_date": "2015-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-06-23T16:52:10+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update).",
"product_ids": [
"Red Hat JBoss A-MQ 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1177"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss A-MQ 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation"
}
]
}
rhsa-2014_2019
Vulnerability from csaf_redhat
Published
2014-12-18 17:58
Modified
2024-11-14 14:32
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update
Notes
Topic
Updated Red Hat JBoss Enterprise Application Platform 6.3.2 packages that
fix three security issues are now available for Red Hat Enterprise Linux 5,
6, and 7.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was discovered that the Apache CXF incorrectly extracted the host name
from an X.509 certificate subject's Common Name (CN) field.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
It was found that Apache WSS4J (Web Services Security for Java), as used by
Apache CXF with the TransportBinding, did not, by default, properly enforce
all security requirements associated with SAML SubjectConfirmation methods.
A remote attacker could use this flaw to perform various types of spoofing
attacks on web service endpoints secured by WSS4j that rely on SAML for
authentication. (CVE-2014-3623)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
All users of Red Hat JBoss Enterprise Application Platform 6.3.2 on Red
Hat Enterprise Linux 5, 6, and 7 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Red Hat JBoss Enterprise Application Platform 6.3.2 packages that\nfix three security issues are now available for Red Hat Enterprise Linux 5,\n6, and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was discovered that the Apache CXF incorrectly extracted the host name\nfrom an X.509 certificate subject\u0027s Common Name (CN) field.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nIt was found that Apache WSS4J (Web Services Security for Java), as used by\nApache CXF with the TransportBinding, did not, by default, properly enforce\nall security requirements associated with SAML SubjectConfirmation methods.\nA remote attacker could use this flaw to perform various types of spoofing\nattacks on web service endpoints secured by WSS4j that rely on SAML for\nauthentication. (CVE-2014-3623)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3.2 on Red\nHat Enterprise Linux 5, 6, and 7 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to\ntake effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:2019",
"url": "https://access.redhat.com/errata/RHSA-2014:2019"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_2019.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update",
"tracking": {
"current_release_date": "2024-11-14T14:32:35+00:00",
"generator": {
"date": "2024-11-14T14:32:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:2019",
"initial_release_date": "2014-12-18T17:58:44+00:00",
"revision_history": [
{
"date": "2014-12-18T17:58:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-12-18T17:58:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:32:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"product": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"product_id": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src",
"product": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src",
"product_id": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src"
},
"product_reference": "apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
},
"product_reference": "wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src",
"relates_to_product_reference": "7Server-JBEAP-6.3"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:58:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up any customized Red\nHat JBoss Enterprise Application Platform 6 configuration files. On update,\nthe configuration files that have been locally modified will not be\nupdated. The updated version of such files will be stored as the rpmnew\nfiles. Make sure to locate any such files after the update and merge any\nchanges manually.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2019"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:58:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up any customized Red\nHat JBoss Enterprise Application Platform 6 configuration files. On update,\nthe configuration files that have been locally modified will not be\nupdated. The updated version of such files will be stored as the rpmnew\nfiles. Make sure to locate any such files after the update and merge any\nchanges manually.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2019"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3623",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1157304"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3623"
},
{
"category": "external",
"summary": "RHBZ#1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623"
}
],
"release_date": "2014-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-12-18T17:58:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up any customized Red\nHat JBoss Enterprise Application Platform 6 configuration files. On update,\nthe configuration files that have been locally modified will not be\nupdated. The updated version of such files will be stored as the rpmnew\nfiles. Make sure to locate any such files after the update and merge any\nchanges manually.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:2019"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5.src",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el5.src",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6.src",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el6.src",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7.src",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:wss4j-0:1.6.16-2.redhat_3.1.ep6.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods"
}
]
}
rhsa-2015_0125
Vulnerability from csaf_redhat
Published
2015-02-04 17:41
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 update
Notes
Topic
Red Hat JBoss Web Framework Kit 2.7.0, which fixes multiple security
issues, various bugs, and adds enhancements, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Web Framework Kit combines popular open source web frameworks
into a single solution for Java applications.
This release serves as a replacement for Red Hat JBoss Web Framework Kit
2.6.0, and includes bug fixes and enhancements. Refer to the 2.7.0 Release
Notes for information on the most significant of these changes, available
shortly from https://access.redhat.com/documentation/
This release also fixes the following security issues:
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
Note: For additional information on these two flaws, refer to the
Knowledgebase article in the References section.
It was found that external parameter entities were not disabled when the
resteasy.document.expand.entity.references parameter was set to false.
A remote attacker able to send XML requests to a RESTEasy endpoint could
use this flaw to read files accessible to the user running the application
server, and potentially perform other more advanced XXE attacks.
(CVE-2014-3490)
It was discovered that the implementation of
org.hibernate.validator.util.ReflectionHelper together with the permissions
required to run Hibernate Validator under the Java Security Manager could
allow a malicious application deployed in the same application container to
execute several actions with escalated privileges, which might otherwise
not be possible. This flaw could be used to perform various attacks,
including but not restricted to, arbitrary code execution in systems that
are otherwise secured by the Java Security Manager. (CVE-2014-3558)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product
Security, and the CVE-2014-3490 issue was discovered by David Jorm of Red
Hat Product Security.
All users of Red Hat JBoss Web Framework Kit 2.6.0 as provided from the Red
Hat Customer Portal are advised to upgrade to Red Hat JBoss Web Framework
Kit 2.7.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Web Framework Kit 2.7.0, which fixes multiple security\nissues, various bugs, and adds enhancements, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Web Framework Kit combines popular open source web frameworks\ninto a single solution for Java applications.\n\nThis release serves as a replacement for Red Hat JBoss Web Framework Kit\n2.6.0, and includes bug fixes and enhancements. Refer to the 2.7.0 Release\nNotes for information on the most significant of these changes, available\nshortly from https://access.redhat.com/documentation/\n\nThis release also fixes the following security issues:\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nNote: For additional information on these two flaws, refer to the\nKnowledgebase article in the References section.\n\nIt was found that external parameter entities were not disabled when the\nresteasy.document.expand.entity.references parameter was set to false.\nA remote attacker able to send XML requests to a RESTEasy endpoint could\nuse this flaw to read files accessible to the user running the application\nserver, and potentially perform other more advanced XXE attacks.\n(CVE-2014-3490)\n\nIt was discovered that the implementation of\norg.hibernate.validator.util.ReflectionHelper together with the permissions\nrequired to run Hibernate Validator under the Java Security Manager could\nallow a malicious application deployed in the same application container to\nexecute several actions with escalated privileges, which might otherwise\nnot be possible. This flaw could be used to perform various attacks,\nincluding but not restricted to, arbitrary code execution in systems that\nare otherwise secured by the Java Security Manager. (CVE-2014-3558)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product\nSecurity, and the CVE-2014-3490 issue was discovered by David Jorm of Red\nHat Product Security.\n\nAll users of Red Hat JBoss Web Framework Kit 2.6.0 as provided from the Red\nHat Customer Portal are advised to upgrade to Red Hat JBoss Web Framework\nKit 2.7.0.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0125",
"url": "https://access.redhat.com/errata/RHSA-2015:0125"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit\u0026downloadType=distributions",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit\u0026downloadType=distributions"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Framework_Kit/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Framework_Kit/"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0125.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:33:32+00:00",
"generator": {
"date": "2024-11-14T14:33:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0125",
"initial_release_date": "2015-02-04T17:41:57+00:00",
"revision_history": [
{
"date": "2015-02-04T17:41:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-15T16:41:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Framework Kit 2.7",
"product": {
"name": "Red Hat JBoss Web Framework Kit 2.7",
"product_id": "Red Hat JBoss Web Framework Kit 2.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_framework:2.7.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Framework Kit"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Framework Kit 2.7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-04T17:41:57+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting installation of Red Hat JBoss Enterprise Application Platform or\nRed Hat JBoss Web Server, and applications deployed to it.\n\nThe JBoss server process must be restarted for this update to take effect.",
"product_ids": [
"Red Hat JBoss Web Framework Kit 2.7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0125"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Framework Kit 2.7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Framework Kit 2.7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-04T17:41:57+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting installation of Red Hat JBoss Enterprise Application Platform or\nRed Hat JBoss Web Server, and applications deployed to it.\n\nThe JBoss server process must be restarted for this update to take effect.",
"product_ids": [
"Red Hat JBoss Web Framework Kit 2.7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0125"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Framework Kit 2.7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"cve": "CVE-2014-3558",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2014-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120495"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the implementation of org.hibernate.validator.util.ReflectionHelper together with the permissions required to run Hibernate Validator under the Java Security Manager could allow a malicious application deployed in the same application container to execute several actions with escalated privileges, which might otherwise not be possible. This flaw could be used to perform various attacks, including but not restricted to, arbitrary code execution in systems that are otherwise secured by the Java Security Manager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Validator: JSM bypass via ReflectionHelper",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Framework Kit 2.7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3558"
},
{
"category": "external",
"summary": "RHBZ#1120495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120495"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3558",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3558"
}
],
"release_date": "2014-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-04T17:41:57+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting installation of Red Hat JBoss Enterprise Application Platform or\nRed Hat JBoss Web Server, and applications deployed to it.\n\nThe JBoss server process must be restarted for this update to take effect.",
"product_ids": [
"Red Hat JBoss Web Framework Kit 2.7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0125"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Framework Kit 2.7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Validator: JSM bypass via ReflectionHelper"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Framework Kit 2.7"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-02-04T17:41:57+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting installation of Red Hat JBoss Enterprise Application Platform or\nRed Hat JBoss Web Server, and applications deployed to it.\n\nThe JBoss server process must be restarted for this update to take effect.",
"product_ids": [
"Red Hat JBoss Web Framework Kit 2.7"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0125"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Web Framework Kit 2.7"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1166
Vulnerability from csaf_redhat
Published
2014-09-08 19:37
Modified
2024-11-14 14:30
Summary
Red Hat Security Advisory: jakarta-commons-httpclient security update
Notes
Topic
Updated jakarta-commons-httpclient packages that fix one security issue are
now available for Red Hat Enterprise Linux 5, 6, and 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Jakarta Commons HTTPClient implements the client side of HTTP standards.
It was discovered that the HTTPClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
For additional information on this flaw, refer to the Knowledgebase
article in the References section.
All jakarta-commons-httpclient users are advised to upgrade to these
updated packages, which contain a backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated jakarta-commons-httpclient packages that fix one security issue are\nnow available for Red Hat Enterprise Linux 5, 6, and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Jakarta Commons HTTPClient implements the client side of HTTP standards.\n\nIt was discovered that the HTTPClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nFor additional information on this flaw, refer to the Knowledgebase\narticle in the References section.\n\nAll jakarta-commons-httpclient users are advised to upgrade to these\nupdated packages, which contain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1166",
"url": "https://access.redhat.com/errata/RHSA-2014:1166"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1166.json"
}
],
"title": "Red Hat Security Advisory: jakarta-commons-httpclient security update",
"tracking": {
"current_release_date": "2024-11-14T14:30:31+00:00",
"generator": {
"date": "2024-11-14T14:30:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1166",
"initial_release_date": "2014-09-08T19:37:54+00:00",
"revision_history": [
{
"date": "2014-09-08T19:37:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-08T19:37:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:30:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.1-0.9.el6_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.1-0.9.el6_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"product_id": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.1-0.9.el6_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"product_id": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.1-0.9.el6_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"product_id": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-0.9.el6_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"product_id": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.0-7jpp.4.el5_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.0-7jpp.4.el5_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.0-7jpp.4.el5_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"product_id": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.0-7jpp.4.el5_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.1-0.9.el6_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.1-0.9.el6_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"product_id": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.1-0.9.el6_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"product_id": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.1-0.9.el6_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"product_id": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-0.9.el6_5?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.1-0.9.el6_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.1-0.9.el6_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"product_id": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.1-0.9.el6_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"product_id": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.1-0.9.el6_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"product_id": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-0.9.el6_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"product_id": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.0-7jpp.4.el5_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.0-7jpp.4.el5_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.0-7jpp.4.el5_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"product_id": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.0-7jpp.4.el5_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.1-0.9.el6_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.1-0.9.el6_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"product_id": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.1-0.9.el6_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"product_id": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.1-0.9.el6_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"product_id": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-0.9.el6_5?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"product_id": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-0.9.el6_5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"product_id": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-16.el7_0?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"product": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"product_id": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-16.el7_0?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"product_id": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.1-16.el7_0?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.1-16.el7_0?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"product_id": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.1-16.el7_0?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"product_id": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.0-7jpp.4.el5_10?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.0-7jpp.4.el5_10?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.0-7jpp.4.el5_10?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"product_id": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.0-7jpp.4.el5_10?arch=ia64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"product_id": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.0-7jpp.4.el5_10?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.0-7jpp.4.el5_10?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.0-7jpp.4.el5_10?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"product_id": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.0-7jpp.4.el5_10?arch=ppc\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"product": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"product_id": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-manual@3.0-7jpp.4.el5_10?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"product": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"product_id": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient@3.0-7jpp.4.el5_10?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"product": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"product_id": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-debuginfo@3.0-7jpp.4.el5_10?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"product": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"product_id": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-javadoc@3.0-7jpp.4.el5_10?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"product": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"product_id": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-httpclient-demo@3.0-7jpp.4.el5_10?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"relates_to_product_reference": "5Server-5.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-1:3.1-16.el7_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src"
},
"product_reference": "jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
},
"product_reference": "jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-08T19:37:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1166"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Client-Workstation-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.src",
"5Server-5.10.Z:jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-debuginfo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-demo-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-javadoc-1:3.0-7jpp.4.el5_10.x86_64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.i386",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ia64",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.ppc",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.s390x",
"5Server-5.10.Z:jakarta-commons-httpclient-manual-1:3.0-7jpp.4.el5_10.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Client-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Client-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6ComputeNode-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Server-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Server-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.src",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-debuginfo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-demo-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-javadoc-1:3.1-0.9.el6_5.x86_64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.i686",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.ppc64",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.s390x",
"6Workstation-optional-6.5.z:jakarta-commons-httpclient-manual-1:3.1-0.9.el6_5.x86_64",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Client-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Server-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-1:3.1-16.el7_0.src",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-demo-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-javadoc-1:3.1-16.el7_0.noarch",
"7Workstation-optional-7.0.Z:jakarta-commons-httpclient-manual-1:3.1-16.el7_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2015_0850
Vulnerability from csaf_redhat
Published
2015-04-16 16:02
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 update
Notes
Topic
Red Hat JBoss BRMS 6.1.0, which fixes multiple security issues, several
bugs, and adds various enhancements, is now available from the Red Hat
Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BRMS is a business rules management system for the
management, storage, creation, modification, and deployment of JBoss Rules.
This release of Red Hat JBoss BRMS 6.1.0 serves as a replacement for Red
Hat JBoss BRMS 6.0.3, and includes bug fixes and enhancements. Refer to the
Red Hat JBoss BRMS 6.1.0 Release Notes for information on the most
significant of these changes. The Release Notes are available at
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws
handlers
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-7397 async-http-client: SSL/TLS certificate verification is
disabled under certain conditions
CVE-2013-7398 async-http-client: missing hostname verification for SSL
certificates
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid
SAML Tokens as valid
CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a
Symmetric EncryptBeforeSigning policy
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause
OOM errors
CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space
to fill
CVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7827 JBoss Security: Wrong security context loaded when using
SAML2 STS Login Module
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian
Weimer of Red Hat Product Security; the CVE-2014-8125 was discovered by
Jeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra
Lukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was
discovered by Richard Opalka and Arun Neelicattu of Red Hat.
All users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer
Portal are advised to upgrade to Red Hat JBoss BRMS 6.1.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BRMS 6.1.0, which fixes multiple security issues, several\nbugs, and adds various enhancements, is now available from the Red Hat\nCustomer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BRMS is a business rules management system for the\nmanagement, storage, creation, modification, and deployment of JBoss Rules.\n\nThis release of Red Hat JBoss BRMS 6.1.0 serves as a replacement for Red\nHat JBoss BRMS 6.0.3, and includes bug fixes and enhancements. Refer to the\nRed Hat JBoss BRMS 6.1.0 Release Notes for information on the most\nsignificant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-7397 async-http-client: SSL/TLS certificate verification is\ndisabled under certain conditions\n\nCVE-2013-7398 async-http-client: missing hostname verification for SSL\ncertificates\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content could cause temporary space\nto fill\n\nCVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7827 JBoss Security: Wrong security context loaded when using\nSAML2 STS Login Module\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nCVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian\nWeimer of Red Hat Product Security; the CVE-2014-8125 was discovered by\nJeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra\nLukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat.\n\nAll users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer\nPortal are advised to upgrade to Red Hat JBoss BRMS 6.1.0.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0850",
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.1.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.1.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/"
},
{
"category": "external",
"summary": "969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "1160574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574"
},
{
"category": "external",
"summary": "1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "external",
"summary": "1169553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0850.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:33:57+00:00",
"generator": {
"date": "2024-11-14T14:33:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2015:0850",
"initial_release_date": "2015-04-16T16:02:45+00:00",
"revision_history": [
{
"date": "2015-04-16T16:02:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BRMS 6.0",
"product": {
"name": "Red Hat JBoss BRMS 6.0",
"product_id": "Red Hat JBoss BRMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_brms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Decision Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"acknowledgments": [
{
"names": [
"Richard Opalka"
]
},
{
"names": [
"Arun Neelicattu"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-2133",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2013-06-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "969924"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WS: EJB3 role restrictions are not applied to jaxws handlers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-2133"
},
{
"category": "external",
"summary": "RHBZ#969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2133"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133"
}
],
"release_date": "2013-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WS: EJB3 role restrictions are not applied to jaxws handlers"
},
{
"cve": "CVE-2013-4517",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2013-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1045257"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Java: Java XML Signature DoS Attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4517"
},
{
"category": "external",
"summary": "RHBZ#1045257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517"
}
],
"release_date": "2013-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Java: Java XML Signature DoS Attack"
},
{
"cve": "CVE-2013-7397",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133769"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7397"
},
{
"category": "external",
"summary": "RHBZ#1133769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7397",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397"
}
],
"release_date": "2013-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions"
},
{
"cve": "CVE-2013-7398",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1133773"
}
],
"notes": [
{
"category": "description",
"text": "It was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "async-http-client: missing hostname verification for SSL certificates",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7398"
},
{
"category": "external",
"summary": "RHBZ#1133773",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7398",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7398"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398"
}
],
"release_date": "2013-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "async-http-client: missing hostname verification for SSL certificates"
},
{
"cve": "CVE-2014-0034",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093529"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0034"
},
{
"category": "external",
"summary": "RHBZ#1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid"
},
{
"cve": "CVE-2014-0035",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093530"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0035"
},
{
"category": "external",
"summary": "RHBZ#1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"cve": "CVE-2014-0109",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093526"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0109"
},
{
"category": "external",
"summary": "RHBZ#1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors"
},
{
"cve": "CVE-2014-0110",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Large invalid content could cause temporary space to fill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0110"
},
{
"category": "external",
"summary": "RHBZ#1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Large invalid content could cause temporary space to fill"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3623",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1157304"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3623"
},
{
"category": "external",
"summary": "RHBZ#1157304",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623"
}
],
"release_date": "2014-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods"
},
{
"acknowledgments": [
{
"names": [
"Ondra Lukas"
],
"organization": "Red Hat Quality Engineering Team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7827",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2014-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1160574"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Wrong security context loaded when using SAML2 STS Login Module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7827"
},
{
"category": "external",
"summary": "RHBZ#1160574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827"
}
],
"release_date": "2015-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Wrong security context loaded when using SAML2 STS Login Module"
},
{
"cve": "CVE-2014-7839",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165328"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTeasy: External entities expanded by DocumentProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7839"
},
{
"category": "external",
"summary": "RHBZ#1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7839"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839"
}
],
"release_date": "2014-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTeasy: External entities expanded by DocumentProvider"
},
{
"acknowledgments": [
{
"names": [
"Rune Steinseth"
],
"organization": "JProfessionals"
}
],
"cve": "CVE-2014-8122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2014-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169237"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Weld: Limited information disclosure via stale thread state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8122"
},
{
"category": "external",
"summary": "RHBZ#1169237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8122"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122"
}
],
"release_date": "2014-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Weld: Limited information disclosure via stale thread state"
},
{
"acknowledgments": [
{
"names": [
"Jeremy Lindop"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-8125",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1169553"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the jBPM runtime performed expansion of external parameter entities while executing BPMN2 files. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jBPM: BPMN2 file processing XXE in Process Execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-8125"
},
{
"category": "external",
"summary": "RHBZ#1169553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-8125",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8125"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125"
}
],
"release_date": "2014-12-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-04-16T16:02:45+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0850"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jBPM: BPMN2 file processing XXE in Process Execution"
}
]
}
rhsa-2022_0055
Vulnerability from csaf_redhat
Published
2022-03-10 14:59
Modified
2024-11-14 14:35
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update
Notes
Topic
Red Hat OpenShift Container Platform release 4.10.3 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.10.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.10.3. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2022:0055
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html
Security Fix(es):
* Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix (CVE-2014-3577)
* golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)
* jenkins-2-plugins/git: stored XSS vulnerability (CVE-2021-21684)
* golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)
* cri-o: pod with access to 'hostIPC' and 'hostNetwork' kernel namespace allows sysctl from the list of safe sysctls to be applied to the host (CVE-2022-0532)
* opencontainers: OCI manifest and index parsing confusion (CVE-2021-41190)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
You may download the oc tool and use it to inspect release image metadata as follows:
(For x86_64 architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-x86_64
The image digest is sha256:7ffe4cd612be27e355a640e5eec5cd8f923c1400d969fd590f806cffdaabcc56
(For s390x architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-s390x
The image digest is sha256:4cf21a9399da1ce8427246f251ae5dedacfc8c746d2345f9cfe039ed9eda3e69
(For ppc64le architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-ppc64le
The image digest is sha256:4ee571da1edf59dfee4473aa4604aba63c224bf8e6bcf57d048305babbbde93c
All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available
at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.10.3 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.10.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.10.3. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHSA-2022:0055\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nSecurity Fix(es):\n\n* Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix (CVE-2014-3577)\n* golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)\n* jenkins-2-plugins/git: stored XSS vulnerability (CVE-2021-21684)\n* golang: syscall: don\u0027t close fd 0 on ForkExec error (CVE-2021-44717)\n* cri-o: pod with access to \u0027hostIPC\u0027 and \u0027hostNetwork\u0027 kernel namespace allows sysctl from the list of safe sysctls to be applied to the host (CVE-2022-0532)\n* opencontainers: OCI manifest and index parsing confusion (CVE-2021-41190)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nYou may download the oc tool and use it to inspect release image metadata as follows:\n\n(For x86_64 architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-x86_64\n\nThe image digest is sha256:7ffe4cd612be27e355a640e5eec5cd8f923c1400d969fd590f806cffdaabcc56\n\n(For s390x architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-s390x\n\nThe image digest is sha256:4cf21a9399da1ce8427246f251ae5dedacfc8c746d2345f9cfe039ed9eda3e69\n\n(For ppc64le architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.10.3-ppc64le\n\nThe image digest is sha256:4ee571da1edf59dfee4473aa4604aba63c224bf8e6bcf57d048305babbbde93c\n\nAll OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available\nat https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:0055",
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "2011949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011949"
},
{
"category": "external",
"summary": "2024938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024938"
},
{
"category": "external",
"summary": "2030801",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030801"
},
{
"category": "external",
"summary": "2030806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030806"
},
{
"category": "external",
"summary": "2051730",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051730"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0055.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update",
"tracking": {
"current_release_date": "2024-11-14T14:35:30+00:00",
"generator": {
"date": "2024-11-14T14:35:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2022:0055",
"initial_release_date": "2022-03-10T14:59:25+00:00",
"revision_history": [
{
"date": "2022-03-10T14:59:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-03-10T14:59:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:35:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.10",
"product": {
"name": "Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.10::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.10",
"product": {
"name": "Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"product": {
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"product_id": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.0-92.rhaos4.10.gitdaab4d1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el7.src",
"product": {
"name": "cri-tools-0:1.23.0-1.el7.src",
"product_id": "cri-tools-0:1.23.0-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"product": {
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"product_id": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.1-3.rhaos4.10.git4144b63.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"product": {
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"product_id": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"product": {
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"product_id": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift@4.10.0-202202250816.p0.ge419edf.assembly.stream.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"product": {
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"product_id": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/console-login-helper-messages@0.20.3-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"product": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"product_id": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer@0.12.0-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el8.src",
"product": {
"name": "cri-tools-0:1.23.0-1.el8.src",
"product_id": "cri-tools-0:1.23.0-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "haproxy-0:2.2.19-1.el8.src",
"product": {
"name": "haproxy-0:2.2.19-1.el8.src",
"product_id": "haproxy-0:2.2.19-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/haproxy@2.2.19-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.src",
"product": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.src",
"product_id": "openvswitch2.16-0:2.16.0-33.el8fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16@2.16.0-33.el8fdp?arch=src"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-0:21.09.0-22.el8fdp.src",
"product": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.src",
"product_id": "ovn21.09-0:21.09.0-22.el8fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09@21.09.0-22.el8fdp?arch=src"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-0:21.12.0-25.el8fdp.src",
"product": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.src",
"product_id": "ovn21.12-0:21.12.0-25.el8fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12@21.12.0-25.el8fdp?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-autopage-0:0.4.0-1.el8.src",
"product": {
"name": "python-autopage-0:0.4.0-1.el8.src",
"product_id": "python-autopage-0:0.4.0-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-autopage@0.4.0-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-cachetools-0:3.1.0-2.el8ost.src",
"product": {
"name": "python-cachetools-0:3.1.0-2.el8ost.src",
"product_id": "python-cachetools-0:3.1.0-2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cachetools@3.1.0-2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"product": {
"name": "python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"product_id": "python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cliff@3.9.0-0.20211020191737.734bc0c.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"product": {
"name": "python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"product_id": "python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debtcollector@2.3.0-0.20211012161119.0bf5bf5.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"product": {
"name": "python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"product_id": "python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-dracclient@7.0.0-0.20211012182751.d26664e.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"product": {
"name": "python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"product_id": "python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hardware@0.29.0-0.20211122094056.7662a1d.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"product": {
"name": "python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"product_id": "python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-ironic-lib@5.1.0-0.20211209154936.731e2f9.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"product": {
"name": "python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"product_id": "python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-ironic-prometheus-exporter@3.1.0-0.20211130174057.d25ba32.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"product": {
"name": "python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"product_id": "python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-ironicclient@4.9.0-0.20211209154934.6f1be06.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"product": {
"name": "python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"product_id": "python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-keystoneauth1@4.4.0-0.20211012144044.112bcae.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"product": {
"name": "python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"product_id": "python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-openstacksdk@0.59.0-0.20211012172340.d0d4d8b.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"product": {
"name": "python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"product_id": "python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-osc-lib@2.4.2-0.20211012163041.415a6c7.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"product": {
"name": "python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"product_id": "python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-concurrency@4.4.1-0.20211012150632.8e08400.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"product": {
"name": "python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"product_id": "python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-config@8.7.1-0.20211012155707.1a7bd66.el8?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"product": {
"name": "python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"product_id": "python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-context@3.3.1-0.20211012152439.641a1e0.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"product": {
"name": "python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"product_id": "python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-db@9.1.0-0.20211020204148.be2cc6a.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"product": {
"name": "python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"product_id": "python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-i18n@5.1.0-0.20211012165753.b031d17.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"product": {
"name": "python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"product_id": "python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-log@4.6.0-0.20211012154701.41c8807.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"product": {
"name": "python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"product_id": "python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-messaging@12.9.1-0.20211020204149.f9de265.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"product": {
"name": "python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"product_id": "python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-metrics@0.3.0-0.20211020174122.43eee50.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"product": {
"name": "python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"product_id": "python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-policy@3.8.2-0.20211012161944.c7fd9f4.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"product": {
"name": "python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"product_id": "python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-serialization@4.2.0-0.20211012151454.2b94a4f.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"product": {
"name": "python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"product_id": "python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-service@2.6.0-0.20211012154519.091fd65.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"product": {
"name": "python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"product_id": "python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-upgradecheck@1.4.0-0.20211012144915.3ca8698.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"product": {
"name": "python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"product_id": "python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-utils@4.10.0-0.20211012164840.2c74bb9.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pbr-0:5.5.1-1.el8ost.src",
"product": {
"name": "python-pbr-0:5.5.1-1.el8ost.src",
"product_id": "python-pbr-0:5.5.1-1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pbr@5.5.1-1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"product": {
"name": "python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"product_id": "python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-proliantutils@2.12.2-0.20211210161243.500f518.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"product": {
"name": "python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"product_id": "python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-scciclient@0.11.1-0.20211208154124.a84332b.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"product": {
"name": "python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"product_id": "python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-stevedore@3.4.0-0.20211012153718.8846a3f.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"product": {
"name": "python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"product_id": "python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-sushy@4.0.0-0.20211209155954.45d24d4.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"product": {
"name": "python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"product_id": "python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-sushy-oem-idrac@3.0.2-0.20211011174039.9733d23.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"product": {
"name": "python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"product_id": "python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tooz@2.9.0-0.20211012145018.174065f.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "redhat-release-coreos-0:410.84-2.el8.src",
"product": {
"name": "redhat-release-coreos-0:410.84-2.el8.src",
"product_id": "redhat-release-coreos-0:410.84-2.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redhat-release-coreos@410.84-2.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"product": {
"name": "rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"product_id": "rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-bootupd@0.2.5-3.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"product": {
"name": "rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"product_id": "rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-afterburn@5.2.0-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.src",
"product": {
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.src",
"product_id": "toolbox-0:0.0.8-4.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox@0.0.8-4.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "buildah-0:1.19.7-1.el8.src",
"product": {
"name": "buildah-0:1.19.7-1.el8.src",
"product_id": "buildah-0:1.19.7-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.19.7-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "butane-0:0.14.0-1.rhaos4.10.el8.src",
"product": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.src",
"product_id": "butane-0:0.14.0-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane@0.14.0-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"product": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"product_id": "conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.0.26-0.rhaos4.10.el8.4?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"product": {
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"product_id": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/container-selinux@2.173.1-0.rhaos4.10.el8.6?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"product": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"product_id": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@0.9.1-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"product": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"product_id": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.4.0-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.src",
"product": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.src",
"product_id": "ignition-0:2.13.0-2.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.13.0-2.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.319.2.1643288987-1.el8.src",
"product": {
"name": "jenkins-0:2.319.2.1643288987-1.el8.src",
"product_id": "jenkins-0:2.319.2.1643288987-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.319.2.1643288987-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"product": {
"name": "openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"product_id": "openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic@19.0.1-0.20220120204037.438b8af.el8?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"product": {
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"product_id": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-inspector@10.9.1-0.20220117094044.19e2592.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"product": {
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"product_id": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-python-agent@8.3.1-0.20220105174059.d2d3cd6.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "podman-0:3.0.1-7.rhaos4.10.el8.src",
"product": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.src",
"product_id": "podman-0:3.0.1-7.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@3.0.1-7.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"product": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"product_id": "skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.2.2-1.rhaos4.10.el8?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.4.2-1.rhaos4.10.el8.src",
"product": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.src",
"product_id": "crun-0:1.4.2-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.4.2-1.rhaos4.10.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"product": {
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"product_id": "jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.10.1643404185-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "runc-3:1.1.0-1.rhaos4.10.el8.src",
"product": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.src",
"product_id": "runc-3:1.1.0-1.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.1.0-1.rhaos4.10.el8?arch=src\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "containers-common-2:1-16.rhaos4.10.el8.src",
"product": {
"name": "containers-common-2:1-16.rhaos4.10.el8.src",
"product_id": "containers-common-2:1-16.rhaos4.10.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1-16.rhaos4.10.el8?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "kata-containers-0:2.3.0-3.el8.src",
"product": {
"name": "kata-containers-0:2.3.0-3.el8.src",
"product_id": "kata-containers-0:2.3.0-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kata-containers@2.3.0-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-0:21.12.0-15.el8fdp.src",
"product": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.src",
"product_id": "ovn-2021-0:21.12.0-15.el8fdp.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021@21.12.0-15.el8fdp?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"product": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"product_id": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"product": {
"name": "openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"product_id": "openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr@4.10.0-202202160023.p0.ge77f917.assembly.stream.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"product": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"product_id": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"product": {
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"product_id": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift@4.10.0-202202250816.p0.ge419edf.assembly.stream.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product": {
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product_id": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.0-92.rhaos4.10.gitdaab4d1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product_id": "cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.23.0-92.rhaos4.10.gitdaab4d1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el7.x86_64",
"product": {
"name": "cri-tools-0:1.23.0-1.el7.x86_64",
"product_id": "cri-tools-0:1.23.0-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"product": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"product_id": "cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.23.0-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product": {
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product_id": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.0.1-3.rhaos4.10.git4144b63.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product": {
"name": "runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product_id": "runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.0.1-3.rhaos4.10.git4144b63.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product_id": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.10.0-202202160023.p0.gf93da17.assembly.stream.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"product": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"product_id": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.10.0-202202250816.p0.ge419edf.assembly.stream.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_id": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer@0.12.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_id": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debugsource@0.12.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_id": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra-debuginfo@0.12.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_id": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debuginfo@0.12.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el8.x86_64",
"product": {
"name": "cri-tools-0:1.23.0-1.el8.x86_64",
"product_id": "cri-tools-0:1.23.0-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"product": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"product_id": "cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.23.0-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"product": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"product_id": "cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.23.0-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"product": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"product_id": "haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.19-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_id": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/network-scripts-openvswitch2.16@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_id": "openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"product_id": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-devel@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"product_id": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-ipsec@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_id": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"product_id": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debugsource@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product_id": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product_id": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debugsource@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central-debuginfo@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debuginfo@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host-debuginfo@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_id": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep-debuginfo@21.09.0-22.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debugsource@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central-debuginfo@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debuginfo@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host-debuginfo@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_id": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep-debuginfo@21.12.0-25.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "redhat-release-coreos-0:410.84-2.el8.x86_64",
"product": {
"name": "redhat-release-coreos-0:410.84-2.el8.x86_64",
"product_id": "redhat-release-coreos-0:410.84-2.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redhat-release-coreos@410.84-2.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product": {
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_id": "bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bootupd@0.2.5-3.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product": {
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_id": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-bootupd-debugsource@0.2.5-3.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product": {
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_id": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bootupd-debuginfo@0.2.5-3.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_id": "afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn@5.2.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_id": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-afterburn-debugsource@5.2.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_id": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn-debuginfo@5.2.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "buildah-0:1.19.7-1.el8.x86_64",
"product": {
"name": "buildah-0:1.19.7-1.el8.x86_64",
"product_id": "buildah-0:1.19.7-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.19.7-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-0:1.19.7-1.el8.x86_64",
"product": {
"name": "buildah-tests-0:1.19.7-1.el8.x86_64",
"product_id": "buildah-tests-0:1.19.7-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.19.7-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-0:1.19.7-1.el8.x86_64",
"product": {
"name": "buildah-debugsource-0:1.19.7-1.el8.x86_64",
"product_id": "buildah-debugsource-0:1.19.7-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.19.7-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"product": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"product_id": "buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.19.7-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"product": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"product_id": "buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.19.7-1.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_id": "butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane@0.14.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_id": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debugsource@0.14.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_id": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debuginfo@0.14.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_id": "conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.0.26-0.rhaos4.10.el8.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_id": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debugsource@2.0.26-0.rhaos4.10.el8.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_id": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debuginfo@2.0.26-0.rhaos4.10.el8.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_id": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@0.9.1-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_id": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debugsource@0.9.1-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_id": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debuginfo@0.9.1-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_id": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.4.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_id": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debugsource@1.4.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_id": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debuginfo@1.4.0-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_id": "ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.13.0-2.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_id": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.13.0-2.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_id": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.13.0-2.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_id": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.13.0-2.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_id": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.13.0-2.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-tests@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debugsource@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit-debuginfo@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debuginfo@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins-debuginfo@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_id": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote-debuginfo@3.0.1-7.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_id": "containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1.2.2-1.rhaos4.10.el8?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_id": "skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.2.2-1.rhaos4.10.el8?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_id": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.2.2-1.rhaos4.10.el8?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_id": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.2.2-1.rhaos4.10.el8?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_id": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.2.2-1.rhaos4.10.el8?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_id": "crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.4.2-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_id": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debugsource@1.4.2-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_id": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debuginfo@1.4.2-1.rhaos4.10.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_id": "runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.1.0-1.rhaos4.10.el8?arch=x86_64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_id": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.1.0-1.rhaos4.10.el8?arch=x86_64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_id": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.1.0-1.rhaos4.10.el8?arch=x86_64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "kata-containers-0:2.3.0-3.el8.x86_64",
"product": {
"name": "kata-containers-0:2.3.0-3.el8.x86_64",
"product_id": "kata-containers-0:2.3.0-3.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kata-containers@2.3.0-3.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debugsource@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central-debuginfo@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debuginfo@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host-debuginfo@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_id": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep-debuginfo@21.12.0-15.el8fdp?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"product": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"product_id": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_id": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_id": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_id": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"product_id": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.10.0-202202250816.p0.ge419edf.assembly.stream.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product": {
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product_id": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product": {
"name": "openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product_id": "openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-test@4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"product": {
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_id": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/console-login-helper-messages@0.20.3-1.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"product": {
"name": "console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_id": "console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/console-login-helper-messages-issuegen@0.20.3-1.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"product": {
"name": "console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_id": "console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/console-login-helper-messages-profile@0.20.3-1.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"product": {
"name": "openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"product_id": "openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-test@2.16.0-33.el8fdp?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-autopage-0:0.4.0-1.el8.noarch",
"product": {
"name": "python3-autopage-0:0.4.0-1.el8.noarch",
"product_id": "python3-autopage-0:0.4.0-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-autopage@0.4.0-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-cachetools-0:3.1.0-2.el8ost.noarch",
"product": {
"name": "python3-cachetools-0:3.1.0-2.el8ost.noarch",
"product_id": "python3-cachetools-0:3.1.0-2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cachetools@3.1.0-2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product": {
"name": "python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product_id": "python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cliff@3.9.0-0.20211020191737.734bc0c.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product": {
"name": "python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product_id": "python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cliff-tests@3.9.0-0.20211020191737.734bc0c.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"product": {
"name": "python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"product_id": "python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-debtcollector@2.3.0-0.20211012161119.0bf5bf5.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"product": {
"name": "python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"product_id": "python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-dracclient@7.0.0-0.20211012182751.d26664e.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product": {
"name": "python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product_id": "python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-hardware@0.29.0-0.20211122094056.7662a1d.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product": {
"name": "python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product_id": "python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-hardware-detect@0.29.0-0.20211122094056.7662a1d.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"product": {
"name": "python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"product_id": "python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-lib@5.1.0-0.20211209154936.731e2f9.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"product": {
"name": "python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"product_id": "python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-prometheus-exporter@3.1.0-0.20211130174057.d25ba32.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"product": {
"name": "python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"product_id": "python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironicclient@4.9.0-0.20211209154934.6f1be06.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"product": {
"name": "python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"product_id": "python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-keystoneauth1@4.4.0-0.20211012144044.112bcae.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product": {
"name": "python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product_id": "python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openstacksdk@0.59.0-0.20211012172340.d0d4d8b.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product": {
"name": "python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product_id": "python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openstacksdk-tests@0.59.0-0.20211012172340.d0d4d8b.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product": {
"name": "python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product_id": "python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-osc-lib@2.4.2-0.20211012163041.415a6c7.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product": {
"name": "python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product_id": "python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-osc-lib-tests@2.4.2-0.20211012163041.415a6c7.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product": {
"name": "python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_id": "python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-concurrency-lang@4.4.1-0.20211012150632.8e08400.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product": {
"name": "python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_id": "python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-concurrency@4.4.1-0.20211012150632.8e08400.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product": {
"name": "python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_id": "python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-concurrency-tests@4.4.1-0.20211012150632.8e08400.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"product": {
"name": "python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"product_id": "python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-config@8.7.1-0.20211012155707.1a7bd66.el8?arch=noarch\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product": {
"name": "python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product_id": "python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-context@3.3.1-0.20211012152439.641a1e0.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product": {
"name": "python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product_id": "python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-context-tests@3.3.1-0.20211012152439.641a1e0.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product": {
"name": "python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_id": "python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-db-lang@9.1.0-0.20211020204148.be2cc6a.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product": {
"name": "python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_id": "python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-db@9.1.0-0.20211020204148.be2cc6a.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product": {
"name": "python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_id": "python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-db-tests@9.1.0-0.20211020204148.be2cc6a.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product": {
"name": "python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product_id": "python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-i18n-lang@5.1.0-0.20211012165753.b031d17.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product": {
"name": "python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product_id": "python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-i18n@5.1.0-0.20211012165753.b031d17.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product": {
"name": "python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_id": "python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-log-lang@4.6.0-0.20211012154701.41c8807.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product": {
"name": "python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_id": "python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-log@4.6.0-0.20211012154701.41c8807.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product": {
"name": "python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_id": "python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-log-tests@4.6.0-0.20211012154701.41c8807.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product": {
"name": "python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product_id": "python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-messaging@12.9.1-0.20211020204149.f9de265.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product": {
"name": "python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product_id": "python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-messaging-tests@12.9.1-0.20211020204149.f9de265.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product": {
"name": "python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product_id": "python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-metrics@0.3.0-0.20211020174122.43eee50.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product": {
"name": "python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product_id": "python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-metrics-tests@0.3.0-0.20211020174122.43eee50.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product": {
"name": "python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_id": "python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-policy-lang@3.8.2-0.20211012161944.c7fd9f4.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product": {
"name": "python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_id": "python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-policy@3.8.2-0.20211012161944.c7fd9f4.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product": {
"name": "python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_id": "python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-policy-tests@3.8.2-0.20211012161944.c7fd9f4.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product": {
"name": "python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product_id": "python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-serialization@4.2.0-0.20211012151454.2b94a4f.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product": {
"name": "python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product_id": "python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-serialization-tests@4.2.0-0.20211012151454.2b94a4f.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product": {
"name": "python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product_id": "python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-service@2.6.0-0.20211012154519.091fd65.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product": {
"name": "python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product_id": "python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-service-tests@2.6.0-0.20211012154519.091fd65.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"product": {
"name": "python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"product_id": "python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-upgradecheck@1.4.0-0.20211012144915.3ca8698.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product": {
"name": "python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_id": "python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-utils-lang@4.10.0-0.20211012164840.2c74bb9.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product": {
"name": "python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_id": "python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-utils@4.10.0-0.20211012164840.2c74bb9.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product": {
"name": "python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_id": "python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-utils-tests@4.10.0-0.20211012164840.2c74bb9.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pbr-0:5.5.1-1.el8ost.noarch",
"product": {
"name": "python3-pbr-0:5.5.1-1.el8ost.noarch",
"product_id": "python3-pbr-0:5.5.1-1.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pbr@5.5.1-1.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"product": {
"name": "python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"product_id": "python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-proliantutils@2.12.2-0.20211210161243.500f518.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"product": {
"name": "python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"product_id": "python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-scciclient@0.11.1-0.20211208154124.a84332b.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"product": {
"name": "python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"product_id": "python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-stevedore@3.4.0-0.20211012153718.8846a3f.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product": {
"name": "python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product_id": "python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-sushy@4.0.0-0.20211209155954.45d24d4.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product": {
"name": "python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product_id": "python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-sushy-tests@4.0.0-0.20211209155954.45d24d4.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product": {
"name": "python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product_id": "python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-sushy-oem-idrac@3.0.2-0.20211011174039.9733d23.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product": {
"name": "python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product_id": "python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-sushy-oem-idrac-tests@3.0.2-0.20211011174039.9733d23.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"product": {
"name": "python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"product_id": "python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tooz@2.9.0-0.20211012145018.174065f.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"product": {
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"product_id": "toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox@0.0.8-4.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"product": {
"name": "butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"product_id": "butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-redistributable@0.14.0-1.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"product": {
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"product_id": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/container-selinux@2.173.1-0.rhaos4.10.el8.6?arch=noarch\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.319.2.1643288987-1.el8.noarch",
"product": {
"name": "jenkins-0:2.319.2.1643288987-1.el8.noarch",
"product_id": "jenkins-0:2.319.2.1643288987-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.319.2.1643288987-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product": {
"name": "openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_id": "openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-api@19.0.1-0.20220120204037.438b8af.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product": {
"name": "openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_id": "openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-common@19.0.1-0.20220120204037.438b8af.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product": {
"name": "openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_id": "openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-conductor@19.0.1-0.20220120204037.438b8af.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product": {
"name": "python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_id": "python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-tests@19.0.1-0.20220120204037.438b8af.el8?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product": {
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_id": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-inspector@10.9.1-0.20220117094044.19e2592.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product": {
"name": "openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_id": "openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-inspector-api@10.9.1-0.20220117094044.19e2592.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product": {
"name": "openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_id": "openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-inspector-conductor@10.9.1-0.20220117094044.19e2592.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product": {
"name": "openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_id": "openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-inspector-dnsmasq@10.9.1-0.20220117094044.19e2592.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product": {
"name": "python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_id": "python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-inspector-tests@10.9.1-0.20220117094044.19e2592.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product": {
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product_id": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-ironic-python-agent@8.3.1-0.20220105174059.d2d3cd6.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product": {
"name": "python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product_id": "python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-ironic-python-agent@8.3.1-0.20220105174059.d2d3cd6.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"product": {
"name": "podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"product_id": "podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-docker@3.0.1-7.rhaos4.10.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"product_id": "jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.10.1643404185-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "containers-common-2:1-16.rhaos4.10.el8.noarch",
"product": {
"name": "containers-common-2:1-16.rhaos4.10.el8.noarch",
"product_id": "containers-common-2:1-16.rhaos4.10.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1-16.rhaos4.10.el8?arch=noarch\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product": {
"name": "openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_id": "openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.10.0-202202160023.p0.ge77f917.assembly.stream.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product": {
"name": "openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_id": "openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-common@4.10.0-202202160023.p0.ge77f917.assembly.stream.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product": {
"name": "openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_id": "openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.10.0-202202160023.p0.ge77f917.assembly.stream.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product": {
"name": "python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_id": "python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.10.0-202202160023.p0.ge77f917.assembly.stream.el8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_id": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer@0.12.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_id": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debugsource@0.12.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_id": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra-debuginfo@0.12.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_id": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debuginfo@0.12.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el8.aarch64",
"product": {
"name": "cri-tools-0:1.23.0-1.el8.aarch64",
"product_id": "cri-tools-0:1.23.0-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"product": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"product_id": "cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.23.0-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"product": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"product_id": "cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.23.0-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"product": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"product_id": "haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.19-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_id": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/network-scripts-openvswitch2.16@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_id": "openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"product_id": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-devel@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"product_id": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-ipsec@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_id": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"product_id": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debugsource@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product_id": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product_id": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debugsource@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central-debuginfo@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debuginfo@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host-debuginfo@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_id": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep-debuginfo@21.09.0-22.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debugsource@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central-debuginfo@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debuginfo@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host-debuginfo@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_id": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep-debuginfo@21.12.0-25.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "redhat-release-coreos-0:410.84-2.el8.aarch64",
"product": {
"name": "redhat-release-coreos-0:410.84-2.el8.aarch64",
"product_id": "redhat-release-coreos-0:410.84-2.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redhat-release-coreos@410.84-2.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product": {
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_id": "bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bootupd@0.2.5-3.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product": {
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_id": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-bootupd-debugsource@0.2.5-3.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product": {
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_id": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bootupd-debuginfo@0.2.5-3.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_id": "afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn@5.2.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_id": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-afterburn-debugsource@5.2.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_id": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn-debuginfo@5.2.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "buildah-0:1.19.7-1.el8.aarch64",
"product": {
"name": "buildah-0:1.19.7-1.el8.aarch64",
"product_id": "buildah-0:1.19.7-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.19.7-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-0:1.19.7-1.el8.aarch64",
"product": {
"name": "buildah-tests-0:1.19.7-1.el8.aarch64",
"product_id": "buildah-tests-0:1.19.7-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.19.7-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-0:1.19.7-1.el8.aarch64",
"product": {
"name": "buildah-debugsource-0:1.19.7-1.el8.aarch64",
"product_id": "buildah-debugsource-0:1.19.7-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.19.7-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"product": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"product_id": "buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.19.7-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"product": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"product_id": "buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.19.7-1.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_id": "butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane@0.14.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_id": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debugsource@0.14.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_id": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debuginfo@0.14.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_id": "conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.0.26-0.rhaos4.10.el8.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_id": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debugsource@2.0.26-0.rhaos4.10.el8.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_id": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debuginfo@2.0.26-0.rhaos4.10.el8.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_id": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@0.9.1-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_id": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debugsource@0.9.1-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_id": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debuginfo@0.9.1-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_id": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.4.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_id": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debugsource@1.4.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_id": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debuginfo@1.4.0-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_id": "ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.13.0-2.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_id": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.13.0-2.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_id": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.13.0-2.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_id": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.13.0-2.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_id": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.13.0-2.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-tests@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debugsource@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit-debuginfo@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debuginfo@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins-debuginfo@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_id": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote-debuginfo@3.0.1-7.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_id": "containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1.2.2-1.rhaos4.10.el8?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_id": "skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.2.2-1.rhaos4.10.el8?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_id": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.2.2-1.rhaos4.10.el8?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_id": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.2.2-1.rhaos4.10.el8?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_id": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.2.2-1.rhaos4.10.el8?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_id": "crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.4.2-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_id": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debugsource@1.4.2-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_id": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debuginfo@1.4.2-1.rhaos4.10.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_id": "runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.1.0-1.rhaos4.10.el8?arch=aarch64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_id": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.1.0-1.rhaos4.10.el8?arch=aarch64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_id": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.1.0-1.rhaos4.10.el8?arch=aarch64\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "kata-containers-0:2.3.0-3.el8.aarch64",
"product": {
"name": "kata-containers-0:2.3.0-3.el8.aarch64",
"product_id": "kata-containers-0:2.3.0-3.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kata-containers@2.3.0-3.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debugsource@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central-debuginfo@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debuginfo@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host-debuginfo@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_id": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep-debuginfo@21.12.0-15.el8fdp?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"product": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"product_id": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_id": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_id": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_id": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"product": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"product_id": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.10.0-202202250816.p0.ge419edf.assembly.stream.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_id": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer@0.12.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_id": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra@0.12.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_id": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debugsource@0.12.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_id": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra-debuginfo@0.12.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_id": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debuginfo@0.12.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el8.ppc64le",
"product": {
"name": "cri-tools-0:1.23.0-1.el8.ppc64le",
"product_id": "cri-tools-0:1.23.0-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"product": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"product_id": "cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.23.0-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"product": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"product_id": "cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.23.0-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"product": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"product_id": "haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.19-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/network-scripts-openvswitch2.16@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-devel@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-ipsec@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debugsource@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product_id": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debugsource@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central-debuginfo@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debuginfo@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host-debuginfo@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_id": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep-debuginfo@21.09.0-22.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debugsource@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central-debuginfo@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debuginfo@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host-debuginfo@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_id": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep-debuginfo@21.12.0-25.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "redhat-release-coreos-0:410.84-2.el8.ppc64le",
"product": {
"name": "redhat-release-coreos-0:410.84-2.el8.ppc64le",
"product_id": "redhat-release-coreos-0:410.84-2.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redhat-release-coreos@410.84-2.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_id": "afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn@5.2.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_id": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-afterburn-debugsource@5.2.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_id": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn-debuginfo@5.2.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "buildah-0:1.19.7-1.el8.ppc64le",
"product": {
"name": "buildah-0:1.19.7-1.el8.ppc64le",
"product_id": "buildah-0:1.19.7-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.19.7-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-0:1.19.7-1.el8.ppc64le",
"product": {
"name": "buildah-tests-0:1.19.7-1.el8.ppc64le",
"product_id": "buildah-tests-0:1.19.7-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.19.7-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"product": {
"name": "buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"product_id": "buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.19.7-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"product": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"product_id": "buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.19.7-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"product": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"product_id": "buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.19.7-1.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_id": "butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane@0.14.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_id": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debugsource@0.14.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_id": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debuginfo@0.14.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_id": "conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.0.26-0.rhaos4.10.el8.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_id": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debugsource@2.0.26-0.rhaos4.10.el8.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_id": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debuginfo@2.0.26-0.rhaos4.10.el8.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_id": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@0.9.1-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_id": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debugsource@0.9.1-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_id": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debuginfo@0.9.1-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_id": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.4.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_id": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debugsource@1.4.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_id": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debuginfo@1.4.0-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_id": "ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.13.0-2.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_id": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.13.0-2.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_id": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.13.0-2.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_id": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.13.0-2.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_id": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.13.0-2.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-tests@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debugsource@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit-debuginfo@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debuginfo@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins-debuginfo@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_id": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote-debuginfo@3.0.1-7.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_id": "containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1.2.2-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_id": "skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.2.2-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_id": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.2.2-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_id": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.2.2-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_id": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.2.2-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_id": "crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.4.2-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_id": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debugsource@1.4.2-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_id": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debuginfo@1.4.2-1.rhaos4.10.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_id": "runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.1.0-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_id": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.1.0-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_id": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.1.0-1.rhaos4.10.el8?arch=ppc64le\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "kata-containers-0:2.3.0-3.el8.ppc64le",
"product": {
"name": "kata-containers-0:2.3.0-3.el8.ppc64le",
"product_id": "kata-containers-0:2.3.0-3.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kata-containers@2.3.0-3.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debugsource@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central-debuginfo@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debuginfo@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host-debuginfo@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_id": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep-debuginfo@21.12.0-15.el8fdp?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"product": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"product_id": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_id": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_id": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_id": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"product": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"product_id": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.10.0-202202250816.p0.ge419edf.assembly.stream.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_id": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer@0.12.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_id": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra@0.12.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_id": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debugsource@0.12.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_id": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-bootinfra-debuginfo@0.12.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_id": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/coreos-installer-debuginfo@0.12.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.23.0-1.el8.s390x",
"product": {
"name": "cri-tools-0:1.23.0-1.el8.s390x",
"product_id": "cri-tools-0:1.23.0-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.23.0-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"product": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"product_id": "cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.23.0-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"product": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"product_id": "cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.23.0-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "haproxy-debugsource-0:2.2.19-1.el8.s390x",
"product": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.s390x",
"product_id": "haproxy-debugsource-0:2.2.19-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.19-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_id": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/network-scripts-openvswitch2.16@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_id": "openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"product_id": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-devel@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"product_id": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-ipsec@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_id": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"product_id": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debugsource@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product_id": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product_id": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-openvswitch2.16-debuginfo@2.16.0-33.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debugsource@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-central-debuginfo@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-debuginfo@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-host-debuginfo@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_id": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.09-vtep-debuginfo@21.09.0-22.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debugsource@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-central-debuginfo@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-debuginfo@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-host-debuginfo@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_id": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn21.12-vtep-debuginfo@21.12.0-25.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "redhat-release-coreos-0:410.84-2.el8.s390x",
"product": {
"name": "redhat-release-coreos-0:410.84-2.el8.s390x",
"product_id": "redhat-release-coreos-0:410.84-2.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/redhat-release-coreos@410.84-2.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_id": "afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn@5.2.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_id": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-afterburn-debugsource@5.2.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_id": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/afterburn-debuginfo@5.2.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "buildah-0:1.19.7-1.el8.s390x",
"product": {
"name": "buildah-0:1.19.7-1.el8.s390x",
"product_id": "buildah-0:1.19.7-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.19.7-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-0:1.19.7-1.el8.s390x",
"product": {
"name": "buildah-tests-0:1.19.7-1.el8.s390x",
"product_id": "buildah-tests-0:1.19.7-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.19.7-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-0:1.19.7-1.el8.s390x",
"product": {
"name": "buildah-debugsource-0:1.19.7-1.el8.s390x",
"product_id": "buildah-debugsource-0:1.19.7-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.19.7-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-0:1.19.7-1.el8.s390x",
"product": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.s390x",
"product_id": "buildah-debuginfo-0:1.19.7-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.19.7-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"product": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"product_id": "buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.19.7-1.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_id": "butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane@0.14.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_id": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debugsource@0.14.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_id": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/butane-debuginfo@0.14.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_id": "conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.0.26-0.rhaos4.10.el8.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_id": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debugsource@2.0.26-0.rhaos4.10.el8.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_id": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debuginfo@2.0.26-0.rhaos4.10.el8.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"product": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_id": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@0.9.1-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"product": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_id": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debugsource@0.9.1-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"product": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_id": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debuginfo@0.9.1-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_id": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.4.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_id": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debugsource@1.4.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_id": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debuginfo@1.4.0-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"product": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_id": "ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.13.0-2.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"product": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_id": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.13.0-2.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"product": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_id": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.13.0-2.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_id": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.13.0-2.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_id": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.13.0-2.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-tests@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debugsource@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit-debuginfo@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debuginfo@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins-debuginfo@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_id": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote-debuginfo@3.0.1-7.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_id": "containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1.2.2-1.rhaos4.10.el8?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_id": "skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.2.2-1.rhaos4.10.el8?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_id": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.2.2-1.rhaos4.10.el8?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_id": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.2.2-1.rhaos4.10.el8?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_id": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.2.2-1.rhaos4.10.el8?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_id": "crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.4.2-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_id": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debugsource@1.4.2-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"product": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_id": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debuginfo@1.4.2-1.rhaos4.10.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_id": "runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.1.0-1.rhaos4.10.el8?arch=s390x\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_id": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.1.0-1.rhaos4.10.el8?arch=s390x\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"product": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_id": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.1.0-1.rhaos4.10.el8?arch=s390x\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debugsource@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-central-debuginfo@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-debuginfo@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-host-debuginfo@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_id": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ovn-2021-vtep-debuginfo@21.12.0-15.el8fdp?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"product": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"product_id": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"product": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"product_id": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.10.0-202202160023.p0.gf93da17.assembly.stream.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_id": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_id": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_id": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.23.1-9.rhaos4.10.gitbdffb9a.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"product": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"product_id": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.10.0-202202250816.p0.ge419edf.assembly.stream.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src"
},
"product_reference": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64"
},
"product_reference": "cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src"
},
"product_reference": "cri-tools-0:1.23.0-1.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64"
},
"product_reference": "cri-tools-0:1.23.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64"
},
"product_reference": "cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src"
},
"product_reference": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch"
},
"product_reference": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src"
},
"product_reference": "openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch"
},
"product_reference": "openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64"
},
"product_reference": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src"
},
"product_reference": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64"
},
"product_reference": "runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64"
},
"product_reference": "runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64"
},
"product_reference": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le"
},
"product_reference": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x"
},
"product_reference": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src"
},
"product_reference": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64"
},
"product_reference": "atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64"
},
"product_reference": "bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64"
},
"product_reference": "bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64"
},
"product_reference": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64"
},
"product_reference": "bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-0:1.19.7-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64"
},
"product_reference": "buildah-0:1.19.7-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-0:1.19.7-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le"
},
"product_reference": "buildah-0:1.19.7-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-0:1.19.7-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x"
},
"product_reference": "buildah-0:1.19.7-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-0:1.19.7-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src"
},
"product_reference": "buildah-0:1.19.7-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-0:1.19.7-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64"
},
"product_reference": "buildah-0:1.19.7-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64"
},
"product_reference": "buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le"
},
"product_reference": "buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x"
},
"product_reference": "buildah-debuginfo-0:1.19.7-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-0:1.19.7-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64"
},
"product_reference": "buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-0:1.19.7-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64"
},
"product_reference": "buildah-debugsource-0:1.19.7-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-0:1.19.7-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le"
},
"product_reference": "buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-0:1.19.7-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x"
},
"product_reference": "buildah-debugsource-0:1.19.7-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-0:1.19.7-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64"
},
"product_reference": "buildah-debugsource-0:1.19.7-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-0:1.19.7-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64"
},
"product_reference": "buildah-tests-0:1.19.7-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-0:1.19.7-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le"
},
"product_reference": "buildah-tests-0:1.19.7-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-0:1.19.7-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x"
},
"product_reference": "buildah-tests-0:1.19.7-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-0:1.19.7-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64"
},
"product_reference": "buildah-tests-0:1.19.7-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64"
},
"product_reference": "buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le"
},
"product_reference": "buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x"
},
"product_reference": "buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64"
},
"product_reference": "buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src"
},
"product_reference": "butane-0:0.14.0-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-0:0.14.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch"
},
"product_reference": "butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64"
},
"product_reference": "conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le"
},
"product_reference": "conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x"
},
"product_reference": "conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src"
},
"product_reference": "conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64"
},
"product_reference": "conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64"
},
"product_reference": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le"
},
"product_reference": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x"
},
"product_reference": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64"
},
"product_reference": "conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64"
},
"product_reference": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le"
},
"product_reference": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x"
},
"product_reference": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64"
},
"product_reference": "conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch"
},
"product_reference": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src"
},
"product_reference": "console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch"
},
"product_reference": "console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch"
},
"product_reference": "console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch"
},
"product_reference": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src"
},
"product_reference": "container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64"
},
"product_reference": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x"
},
"product_reference": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src"
},
"product_reference": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64"
},
"product_reference": "containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64"
},
"product_reference": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x"
},
"product_reference": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64"
},
"product_reference": "containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64"
},
"product_reference": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x"
},
"product_reference": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64"
},
"product_reference": "containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-16.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch"
},
"product_reference": "containers-common-2:1-16.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-16.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src"
},
"product_reference": "containers-common-2:1-16.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src"
},
"product_reference": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64"
},
"product_reference": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le"
},
"product_reference": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x"
},
"product_reference": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src"
},
"product_reference": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
},
"product_reference": "cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64"
},
"product_reference": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le"
},
"product_reference": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x"
},
"product_reference": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64"
},
"product_reference": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le"
},
"product_reference": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x"
},
"product_reference": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
},
"product_reference": "cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64"
},
"product_reference": "cri-tools-0:1.23.0-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le"
},
"product_reference": "cri-tools-0:1.23.0-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x"
},
"product_reference": "cri-tools-0:1.23.0-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src"
},
"product_reference": "cri-tools-0:1.23.0-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.23.0-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64"
},
"product_reference": "cri-tools-0:1.23.0-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64"
},
"product_reference": "cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le"
},
"product_reference": "cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x"
},
"product_reference": "cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.23.0-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64"
},
"product_reference": "cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64"
},
"product_reference": "cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le"
},
"product_reference": "cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x"
},
"product_reference": "cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.23.0-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64"
},
"product_reference": "cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src"
},
"product_reference": "crun-0:1.4.2-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.4.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src"
},
"product_reference": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-0:2.2.19-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src"
},
"product_reference": "haproxy-0:2.2.19-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64"
},
"product_reference": "haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le"
},
"product_reference": "haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x"
},
"product_reference": "haproxy-debugsource-0:2.2.19-1.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-debugsource-0:2.2.19-1.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64"
},
"product_reference": "haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64"
},
"product_reference": "ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le"
},
"product_reference": "ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x"
},
"product_reference": "ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src"
},
"product_reference": "ignition-0:2.13.0-2.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.13.0-2.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64"
},
"product_reference": "ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64"
},
"product_reference": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le"
},
"product_reference": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x"
},
"product_reference": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64"
},
"product_reference": "ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64"
},
"product_reference": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le"
},
"product_reference": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x"
},
"product_reference": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64"
},
"product_reference": "ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64"
},
"product_reference": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le"
},
"product_reference": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x"
},
"product_reference": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64"
},
"product_reference": "ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64"
},
"product_reference": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le"
},
"product_reference": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x"
},
"product_reference": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64"
},
"product_reference": "ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.319.2.1643288987-1.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch"
},
"product_reference": "jenkins-0:2.319.2.1643288987-1.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.319.2.1643288987-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src"
},
"product_reference": "jenkins-0:2.319.2.1643288987-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.10.1643404185-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src"
},
"product_reference": "jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kata-containers-0:2.3.0-3.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64"
},
"product_reference": "kata-containers-0:2.3.0-3.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kata-containers-0:2.3.0-3.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le"
},
"product_reference": "kata-containers-0:2.3.0-3.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kata-containers-0:2.3.0-3.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src"
},
"product_reference": "kata-containers-0:2.3.0-3.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kata-containers-0:2.3.0-3.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64"
},
"product_reference": "kata-containers-0:2.3.0-3.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src"
},
"product_reference": "openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64"
},
"product_reference": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le"
},
"product_reference": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x"
},
"product_reference": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src"
},
"product_reference": "openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch"
},
"product_reference": "openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch"
},
"product_reference": "openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch"
},
"product_reference": "openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src"
},
"product_reference": "openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch"
},
"product_reference": "openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch"
},
"product_reference": "openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch"
},
"product_reference": "openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch"
},
"product_reference": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src"
},
"product_reference": "openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch"
},
"product_reference": "openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch"
},
"product_reference": "openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch"
},
"product_reference": "openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch"
},
"product_reference": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src"
},
"product_reference": "openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src"
},
"product_reference": "openvswitch2.16-0:2.16.0-33.el8fdp.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch"
},
"product_reference": "openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src"
},
"product_reference": "ovn-2021-0:21.12.0-15.el8fdp.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64"
},
"product_reference": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le"
},
"product_reference": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x"
},
"product_reference": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64"
},
"product_reference": "ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src"
},
"product_reference": "ovn21.09-0:21.09.0-22.el8fdp.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64"
},
"product_reference": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le"
},
"product_reference": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x"
},
"product_reference": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64"
},
"product_reference": "ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src"
},
"product_reference": "ovn21.12-0:21.12.0-25.el8fdp.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64"
},
"product_reference": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le"
},
"product_reference": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x"
},
"product_reference": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64"
},
"product_reference": "ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src"
},
"product_reference": "podman-0:3.0.1-7.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch"
},
"product_reference": "podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64"
},
"product_reference": "podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le"
},
"product_reference": "podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x"
},
"product_reference": "podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64"
},
"product_reference": "podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-autopage-0:0.4.0-1.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src"
},
"product_reference": "python-autopage-0:0.4.0-1.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cachetools-0:3.1.0-2.el8ost.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src"
},
"product_reference": "python-cachetools-0:3.1.0-2.el8ost.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src"
},
"product_reference": "python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src"
},
"product_reference": "python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src"
},
"product_reference": "python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src"
},
"product_reference": "python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src"
},
"product_reference": "python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src"
},
"product_reference": "python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src"
},
"product_reference": "python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src"
},
"product_reference": "python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src"
},
"product_reference": "python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src"
},
"product_reference": "python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src"
},
"product_reference": "python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch"
},
"product_reference": "python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src"
},
"product_reference": "python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src"
},
"product_reference": "python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src"
},
"product_reference": "python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch"
},
"product_reference": "python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src"
},
"product_reference": "python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch"
},
"product_reference": "python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src"
},
"product_reference": "python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch"
},
"product_reference": "python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src"
},
"product_reference": "python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src"
},
"product_reference": "python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src"
},
"product_reference": "python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch"
},
"product_reference": "python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src"
},
"product_reference": "python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src"
},
"product_reference": "python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src"
},
"product_reference": "python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src"
},
"product_reference": "python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch"
},
"product_reference": "python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pbr-0:5.5.1-1.el8ost.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src"
},
"product_reference": "python-pbr-0:5.5.1-1.el8ost.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src"
},
"product_reference": "python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src"
},
"product_reference": "python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src"
},
"product_reference": "python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src"
},
"product_reference": "python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src"
},
"product_reference": "python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src"
},
"product_reference": "python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-autopage-0:0.4.0-1.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch"
},
"product_reference": "python3-autopage-0:0.4.0-1.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cachetools-0:3.1.0-2.el8ost.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch"
},
"product_reference": "python3-cachetools-0:3.1.0-2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch"
},
"product_reference": "python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch"
},
"product_reference": "python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch"
},
"product_reference": "python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch"
},
"product_reference": "python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch"
},
"product_reference": "python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch"
},
"product_reference": "python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch"
},
"product_reference": "python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch"
},
"product_reference": "python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch"
},
"product_reference": "python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch"
},
"product_reference": "python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch"
},
"product_reference": "python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch"
},
"product_reference": "python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch"
},
"product_reference": "python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch"
},
"product_reference": "python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch"
},
"product_reference": "python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch"
},
"product_reference": "python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64"
},
"product_reference": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le"
},
"product_reference": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x"
},
"product_reference": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64"
},
"product_reference": "python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch"
},
"product_reference": "python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch"
},
"product_reference": "python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch"
},
"product_reference": "python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch"
},
"product_reference": "python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch"
},
"product_reference": "python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch"
},
"product_reference": "python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch"
},
"product_reference": "python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch"
},
"product_reference": "python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch"
},
"product_reference": "python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch"
},
"product_reference": "python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch"
},
"product_reference": "python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch"
},
"product_reference": "python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch"
},
"product_reference": "python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch"
},
"product_reference": "python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch"
},
"product_reference": "python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch"
},
"product_reference": "python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch"
},
"product_reference": "python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch"
},
"product_reference": "python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch"
},
"product_reference": "python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch"
},
"product_reference": "python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch"
},
"product_reference": "python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch"
},
"product_reference": "python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch"
},
"product_reference": "python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch"
},
"product_reference": "python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch"
},
"product_reference": "python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pbr-0:5.5.1-1.el8ost.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch"
},
"product_reference": "python3-pbr-0:5.5.1-1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch"
},
"product_reference": "python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch"
},
"product_reference": "python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch"
},
"product_reference": "python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch"
},
"product_reference": "python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch"
},
"product_reference": "python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch"
},
"product_reference": "python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch"
},
"product_reference": "python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch"
},
"product_reference": "python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-release-coreos-0:410.84-2.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64"
},
"product_reference": "redhat-release-coreos-0:410.84-2.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-release-coreos-0:410.84-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le"
},
"product_reference": "redhat-release-coreos-0:410.84-2.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-release-coreos-0:410.84-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x"
},
"product_reference": "redhat-release-coreos-0:410.84-2.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-release-coreos-0:410.84-2.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src"
},
"product_reference": "redhat-release-coreos-0:410.84-2.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "redhat-release-coreos-0:410.84-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64"
},
"product_reference": "redhat-release-coreos-0:410.84-2.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src"
},
"product_reference": "runc-3:1.1.0-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-3:1.1.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src"
},
"product_reference": "rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64"
},
"product_reference": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x"
},
"product_reference": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64"
},
"product_reference": "rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src"
},
"product_reference": "rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64"
},
"product_reference": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64"
},
"product_reference": "rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src"
},
"product_reference": "skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64"
},
"product_reference": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le"
},
"product_reference": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x"
},
"product_reference": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64"
},
"product_reference": "skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.noarch as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch"
},
"product_reference": "toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"relates_to_product_reference": "8Base-RHOSE-4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.8-4.rhaos4.10.el8.src as a component of Red Hat OpenShift Container Platform 4.10",
"product_id": "8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
},
"product_reference": "toolbox-0:0.0.8-4.rhaos4.10.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2021-21684",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2021-10-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2011949"
}
],
"notes": [
{
"category": "description",
"text": "A stored cross-site scripting (XSS) vulnerability was found in the Jenkins Git plugin. Due to not escaping the Git SHA-1 checksum parameters provided to commit notifications, an attacker is able to submit crafted commit notifications to the `/git/notifyCommit` endpoint.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins-2-plugins/git: stored XSS vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is only exploitable in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier [1]\n\n[1] https://www.jenkins.io/doc/upgrade-guide/2.303/#SECURITY-2452",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-21684"
},
{
"category": "external",
"summary": "RHBZ#2011949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-21684",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21684"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-21684",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21684"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2499",
"url": "https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2499"
}
],
"release_date": "2021-10-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins-2-plugins/git: stored XSS vulnerability"
},
{
"cve": "CVE-2021-41190",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2021-11-18T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2024938"
}
],
"notes": [
{
"category": "description",
"text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Image Specification, the manifest and index documents were not self-describing and documents with a single digest could be interpreted as either a manifest or an index. In the OCI Image Specification version 1.0.1 there is specified a recommendation that both manifest and index documents contain a `mediaType` field to identify the type of document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "opencontainers: OCI manifest and index parsing confusion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "As a consequence of the OCI Image Specification (and OCI Distribution Specification [1]), container runtime engines (like containerd, moby - Docker Engine, cri-o) deliver updates to adopt new `mediaType` field used for identification of the document type. Even though some Red Hat products rely on container engine, the impact by this issue is LOW.\n\n[1] https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-41190"
},
{
"category": "external",
"summary": "RHBZ#2024938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-41190",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41190"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42",
"url": "https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m",
"url": "https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh",
"url": "https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh"
}
],
"release_date": "2021-11-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "opencontainers: OCI manifest and index parsing confusion"
},
{
"cve": "CVE-2021-41772",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2021-11-04T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2020736"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in archive/zip of the Go standard library. Applications written in Go where Reader.Open (the API implementing io/fs.FS introduced in Go 1.16) can panic when parsing a crafted ZIP archive containing completely invalid names or an empty filename argument.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Reader.Open panics on empty string",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "* In OpenShift Container Platform multiple components are written in Go and use archive/zip from the standard library. However, all such components are short lived client side tools, not long lived server side executables. As the maximum impact of this vulnerability is a denial of service in client utilities, this vulnerability is rated Low for OpenShift Container Platform.\n\n* Because Service Telemetry Framework1.2 will be retiring soon and the flaw\u0027s impact is lower, no update will be provided at this time for STF1.2\u0027s sg-core-container.\n\n* Because Red Hat Ceph Storage only uses Go\u0027s archive/zip for the Grafana CLI and thus is not directly exploitable, the vulnerability has been rated low for Red Hat Ceph Storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-41772"
},
{
"category": "external",
"summary": "RHBZ#2020736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2020736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-41772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41772"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0fM21h43arc",
"url": "https://groups.google.com/g/golang-announce/c/0fM21h43arc"
}
],
"release_date": "2021-08-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "golang: archive/zip: Reader.Open panics on empty string"
},
{
"cve": "CVE-2021-44716",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-12-09T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2030801"
}
],
"notes": [
{
"category": "description",
"text": "There\u0027s an uncontrolled resource consumption flaw in golang\u0027s net/http library in the canonicalHeader() function. An attacker who submits specially crafted requests to applications linked with net/http\u0027s http2 functionality could cause excessive resource consumption that could lead to a denial of service or otherwise impact to system performance and resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http: limit growth of header canonicalization cache",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "For OpenShift Container Platform, OpenShift Virtualization, Red Hat Quay and OpenShift distributed tracing the most an attacker can possibly achieve by exploiting this vulnerability is to crash a container, temporarily impacting availability of one or more services. Therefore impact is rated Moderate.\n\nIn its default configuration, grafana as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability. However, enabling http2 in /etc/grafana/grafana.ini explicitly would render grafana affected, therefore grafana has been marked affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-44716"
},
{
"category": "external",
"summary": "RHBZ#2030801",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030801"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-44716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44716"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44716",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44716"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/hcmEScgc00k",
"url": "https://groups.google.com/g/golang-announce/c/hcmEScgc00k"
}
],
"release_date": "2021-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
},
{
"category": "workaround",
"details": "This flaw can be mitigated by disabling HTTP/2. Setting the GODEBUG=http2server=0 environment variable before calling Serve will disable HTTP/2 unless it was manually configured through the golang.org/x/net/http2 package.",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http: limit growth of header canonicalization cache"
},
{
"cve": "CVE-2021-44717",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-12-09T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2030806"
}
],
"notes": [
{
"category": "description",
"text": "There\u0027s a flaw in golang\u0027s syscall.ForkExec() interface. An attacker who manages to first cause a file descriptor exhaustion for the process, then cause syscall.ForkExec() to be called repeatedly, could compromise data integrity and/or confidentiality in a somewhat uncontrolled way in programs linked with and using syscall.ForkExec().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: syscall: don\u0027t close fd 0 on ForkExec error",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "* This flaw has had the severity level set to Moderate due to the attack complexity required to exhaust file descriptors at the time ForkExec is called, plus an attacker does not necessarily have direct control over where/how data is leaked.\n\n* For Service Telemetry Framework, because the flaw\u0027s impact is lower, no update will be provided at this time for its containers.\n\n* runc shipped with Red Hat Enterprise Linux 8 and 9 are not affected by this flaw because the flaw is already patched in the shipped versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-44717"
},
{
"category": "external",
"summary": "RHBZ#2030806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-44717",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44717"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44717",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44717"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/hcmEScgc00k",
"url": "https://groups.google.com/g/golang-announce/c/hcmEScgc00k"
}
],
"release_date": "2021-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
},
{
"category": "workaround",
"details": "This bug can be mitigated by raising the per-process file descriptor limit.",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: syscall: don\u0027t close fd 0 on ForkExec error"
},
{
"acknowledgments": [
{
"names": [
"Peter Hunt"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2022-0532",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2022-02-07T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2051730"
}
],
"notes": [
{
"category": "description",
"text": "An incorrect sysctls validation vulnerability was found in CRI-O. The sysctls from the list of \"safe\" sysctls specified for the cluster [0] will be applied to the host if an attacker can create a pod with a `hostIPC` and `hostNetwork` kernel namespace.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cri-o: pod with access to \u0027hostIPC\u0027 and \u0027hostNetwork\u0027 kernel namespace allows sysctl from the list of safe sysctls to be applied to the host",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenShift Container Platform (OCP) uses a vulnerable version of CRI-O, but a successful exploit requires access to at least `hostnetwork` SCC (Security Context Constraints) or `privileged` SCC. The default `restricted` SCC blocks this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
],
"known_not_affected": [
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-tools-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-ansible-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-ansible-test-0:4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7.noarch",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.src",
"7Server-RH7-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.src",
"7Server-RH7-RHOSE-4.10:runc-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"7Server-RH7-RHOSE-4.10:runc-debuginfo-0:1.0.1-3.rhaos4.10.git4144b63.el7.x86_64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:afterburn-debuginfo-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.src",
"8Base-RHOSE-4.10:atomic-openshift-service-idler-0:4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:bootupd-debuginfo-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.src",
"8Base-RHOSE-4.10:buildah-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-debugsource-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.aarch64",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.ppc64le",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.s390x",
"8Base-RHOSE-4.10:buildah-tests-debuginfo-0:1.19.7-1.el8.x86_64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:butane-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debuginfo-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:butane-debugsource-0:0.14.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:butane-redistributable-0:0.14.0-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.src",
"8Base-RHOSE-4.10:conmon-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debuginfo-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.aarch64",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.ppc64le",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.s390x",
"8Base-RHOSE-4.10:conmon-debugsource-2:2.0.26-0.rhaos4.10.el8.4.x86_64",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-0:0.20.3-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:console-login-helper-messages-issuegen-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:console-login-helper-messages-profile-0:0.20.3-1.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.noarch",
"8Base-RHOSE-4.10:container-selinux-2:2.173.1-0.rhaos4.10.el8.6.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:containernetworking-plugins-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debuginfo-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containernetworking-plugins-debugsource-0:0.9.1-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:containers-common-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:containers-common-2:1-16.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:coreos-installer-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-bootinfra-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debuginfo-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:coreos-installer-debugsource-0:0.12.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.src",
"8Base-RHOSE-4.10:cri-tools-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debuginfo-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.aarch64",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.ppc64le",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.s390x",
"8Base-RHOSE-4.10:cri-tools-debugsource-0:1.23.0-1.el8.x86_64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:crun-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debuginfo-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:crun-debugsource-0:1.4.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:fuse-overlayfs-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debuginfo-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:fuse-overlayfs-debugsource-0:1.4.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:haproxy-0:2.2.19-1.el8.src",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.aarch64",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.ppc64le",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.s390x",
"8Base-RHOSE-4.10:haproxy-debugsource-0:2.2.19-1.el8.x86_64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:ignition-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-debugsource-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:ignition-validate-debuginfo-0:2.13.0-2.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-0:2.319.2.1643288987-1.el8.src",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.noarch",
"8Base-RHOSE-4.10:jenkins-2-plugins-0:4.10.1643404185-1.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.aarch64",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.ppc64le",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.src",
"8Base-RHOSE-4.10:kata-containers-0:2.3.0-3.el8.x86_64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:network-scripts-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openshift-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-clients-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-clients-redistributable-0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.s390x",
"8Base-RHOSE-4.10:openshift-hyperkube-0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.10:openshift-kuryr-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.src",
"8Base-RHOSE-4.10:openshift-kuryr-cni-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-common-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openshift-kuryr-controller-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-1:19.0.1-0.20220120204037.438b8af.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-api-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-common-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-conductor-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-0:10.9.1-0.20220117094044.19e2592.el8.src",
"8Base-RHOSE-4.10:openstack-ironic-inspector-api-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-conductor-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-inspector-dnsmasq-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:openstack-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.src",
"8Base-RHOSE-4.10:openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-debugsource-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-devel-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:openvswitch2.16-ipsec-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:openvswitch2.16-test-0:2.16.0-33.el8fdp.noarch",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.src",
"8Base-RHOSE-4.10:ovn-2021-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-central-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-debugsource-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-host-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn-2021-vtep-debuginfo-0:21.12.0-15.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.09-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-central-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-debugsource-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-host-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.09-vtep-debuginfo-0:21.09.0-22.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.src",
"8Base-RHOSE-4.10:ovn21.12-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-central-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-debugsource-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-host-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.aarch64",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.ppc64le",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.s390x",
"8Base-RHOSE-4.10:ovn21.12-vtep-debuginfo-0:21.12.0-25.el8fdp.x86_64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:podman-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-catatonit-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-debugsource-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-docker-0:3.0.1-7.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-plugins-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-remote-debuginfo-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:podman-tests-0:3.0.1-7.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:python-autopage-0:0.4.0-1.el8.src",
"8Base-RHOSE-4.10:python-cachetools-0:3.1.0-2.el8ost.src",
"8Base-RHOSE-4.10:python-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.src",
"8Base-RHOSE-4.10:python-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.src",
"8Base-RHOSE-4.10:python-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.src",
"8Base-RHOSE-4.10:python-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.src",
"8Base-RHOSE-4.10:python-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.src",
"8Base-RHOSE-4.10:python-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.src",
"8Base-RHOSE-4.10:python-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.src",
"8Base-RHOSE-4.10:python-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.src",
"8Base-RHOSE-4.10:python-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.src",
"8Base-RHOSE-4.10:python-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.src",
"8Base-RHOSE-4.10:python-oslo-concurrency-lang-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.src",
"8Base-RHOSE-4.10:python-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.src",
"8Base-RHOSE-4.10:python-oslo-db-lang-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.src",
"8Base-RHOSE-4.10:python-oslo-i18n-lang-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.src",
"8Base-RHOSE-4.10:python-oslo-log-lang-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.src",
"8Base-RHOSE-4.10:python-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.src",
"8Base-RHOSE-4.10:python-oslo-policy-lang-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.src",
"8Base-RHOSE-4.10:python-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.src",
"8Base-RHOSE-4.10:python-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.src",
"8Base-RHOSE-4.10:python-oslo-utils-lang-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python-pbr-0:5.5.1-1.el8ost.src",
"8Base-RHOSE-4.10:python-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.src",
"8Base-RHOSE-4.10:python-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.src",
"8Base-RHOSE-4.10:python-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.src",
"8Base-RHOSE-4.10:python-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.src",
"8Base-RHOSE-4.10:python-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.src",
"8Base-RHOSE-4.10:python-tooz-0:2.9.0-0.20211012145018.174065f.el8.src",
"8Base-RHOSE-4.10:python3-autopage-0:0.4.0-1.el8.noarch",
"8Base-RHOSE-4.10:python3-cachetools-0:3.1.0-2.el8ost.noarch",
"8Base-RHOSE-4.10:python3-cliff-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-cliff-tests-0:3.9.0-0.20211020191737.734bc0c.el8.noarch",
"8Base-RHOSE-4.10:python3-debtcollector-0:2.3.0-0.20211012161119.0bf5bf5.el8.noarch",
"8Base-RHOSE-4.10:python3-dracclient-0:7.0.0-0.20211012182751.d26664e.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-hardware-detect-0:0.29.0-0.20211122094056.7662a1d.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-inspector-tests-0:10.9.1-0.20220117094044.19e2592.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-lib-0:5.1.0-0.20211209154936.731e2f9.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-prometheus-exporter-0:3.1.0-0.20211130174057.d25ba32.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-python-agent-0:8.3.1-0.20220105174059.d2d3cd6.el8.noarch",
"8Base-RHOSE-4.10:python3-ironic-tests-1:19.0.1-0.20220120204037.438b8af.el8.noarch",
"8Base-RHOSE-4.10:python3-ironicclient-0:4.9.0-0.20211209154934.6f1be06.el8.noarch",
"8Base-RHOSE-4.10:python3-keystoneauth1-0:4.4.0-0.20211012144044.112bcae.el8.noarch",
"8Base-RHOSE-4.10:python3-kuryr-kubernetes-0:4.10.0-202202160023.p0.ge77f917.assembly.stream.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openstacksdk-tests-0:0.59.0-0.20211012172340.d0d4d8b.el8.noarch",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.aarch64",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.ppc64le",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.s390x",
"8Base-RHOSE-4.10:python3-openvswitch2.16-debuginfo-0:2.16.0-33.el8fdp.x86_64",
"8Base-RHOSE-4.10:python3-osc-lib-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-osc-lib-tests-0:2.4.2-0.20211012163041.415a6c7.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-concurrency-tests-0:4.4.1-0.20211012150632.8e08400.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-config-2:8.7.1-0.20211012155707.1a7bd66.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-context-tests-0:3.3.1-0.20211012152439.641a1e0.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-db-tests-0:9.1.0-0.20211020204148.be2cc6a.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-i18n-0:5.1.0-0.20211012165753.b031d17.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-log-tests-0:4.6.0-0.20211012154701.41c8807.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-messaging-tests-0:12.9.1-0.20211020204149.f9de265.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-metrics-tests-0:0.3.0-0.20211020174122.43eee50.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-policy-tests-0:3.8.2-0.20211012161944.c7fd9f4.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-serialization-tests-0:4.2.0-0.20211012151454.2b94a4f.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-service-tests-0:2.6.0-0.20211012154519.091fd65.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-upgradecheck-0:1.4.0-0.20211012144915.3ca8698.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-oslo-utils-tests-0:4.10.0-0.20211012164840.2c74bb9.el8.noarch",
"8Base-RHOSE-4.10:python3-pbr-0:5.5.1-1.el8ost.noarch",
"8Base-RHOSE-4.10:python3-proliantutils-0:2.12.2-0.20211210161243.500f518.el8.noarch",
"8Base-RHOSE-4.10:python3-scciclient-0:0.11.1-0.20211208154124.a84332b.el8.noarch",
"8Base-RHOSE-4.10:python3-stevedore-0:3.4.0-0.20211012153718.8846a3f.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-oem-idrac-tests-0:3.0.2-0.20211011174039.9733d23.el8.noarch",
"8Base-RHOSE-4.10:python3-sushy-tests-0:4.0.0-0.20211209155954.45d24d4.el8.noarch",
"8Base-RHOSE-4.10:python3-tooz-0:2.9.0-0.20211012145018.174065f.el8.noarch",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.aarch64",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.ppc64le",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.s390x",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.src",
"8Base-RHOSE-4.10:redhat-release-coreos-0:410.84-2.el8.x86_64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:runc-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debuginfo-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:runc-debugsource-3:1.1.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-afterburn-0:5.2.0-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:rust-afterburn-debugsource-0:5.2.0-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:rust-bootupd-0:0.2.5-3.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:rust-bootupd-debugsource-0:0.2.5-3.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.src",
"8Base-RHOSE-4.10:skopeo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debuginfo-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-debugsource-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.aarch64",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.ppc64le",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.s390x",
"8Base-RHOSE-4.10:skopeo-tests-1:1.2.2-1.rhaos4.10.el8.x86_64",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.noarch",
"8Base-RHOSE-4.10:toolbox-0:0.0.8-4.rhaos4.10.el8.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-0532"
},
{
"category": "external",
"summary": "RHBZ#2051730",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051730"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-0532",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0532"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-0532",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0532"
},
{
"category": "external",
"summary": "https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x",
"url": "https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x"
},
{
"category": "external",
"summary": "https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls",
"url": "https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls"
}
],
"release_date": "2022-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-03-10T14:59:25+00:00",
"details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html",
"product_ids": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.src",
"7Server-RH7-RHOSE-4.10:cri-o-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"7Server-RH7-RHOSE-4.10:cri-o-debuginfo-0:1.23.0-92.rhaos4.10.gitdaab4d1.el7.x86_64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.src",
"8Base-RHOSE-4.10:cri-o-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debuginfo-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.aarch64",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.ppc64le",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.s390x",
"8Base-RHOSE-4.10:cri-o-debugsource-0:1.23.1-9.rhaos4.10.gitbdffb9a.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cri-o: pod with access to \u0027hostIPC\u0027 and \u0027hostNetwork\u0027 kernel namespace allows sysctl from the list of safe sysctls to be applied to the host"
}
]
}
rhsa-2014_1891
Vulnerability from csaf_redhat
Published
2014-11-24 20:46
Modified
2024-11-14 14:32
Summary
Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.3 security update
Notes
Topic
Red Hat JBoss BRMS 6.0.3 roll up patch 1, which fixes two security issues,
several bugs, and adds various enhancements, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BRMS is a business rules management system for the
management, storage, creation, modification, and deployment of JBoss Rules.
This roll up patch serves as a cumulative upgrade for Red Hat JBoss BRMS
6.0.3, and includes bug fixes and enhancements. It includes various bug
fixes, which are listed in the README file included with the patch files.
The following security issues are fixed with this release:
It was discovered that Jakarta Commons HttpClient incorrectly extracted the
host name from an X.509 certificate subject's Common Name (CN) field.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
All users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer
Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss BRMS 6.0.3 roll up patch 1, which fixes two security issues,\nseveral bugs, and adds various enhancements, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss BRMS is a business rules management system for the\nmanagement, storage, creation, modification, and deployment of JBoss Rules.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss BRMS\n6.0.3, and includes bug fixes and enhancements. It includes various bug\nfixes, which are listed in the README file included with the patch files.\n\nThe following security issues are fixed with this release:\n\nIt was discovered that Jakarta Commons HttpClient incorrectly extracted the\nhost name from an X.509 certificate subject\u0027s Common Name (CN) field.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nAll users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer\nPortal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1891",
"url": "https://access.redhat.com/errata/RHSA-2014:1891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.0.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.0.3"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1891.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.3 security update",
"tracking": {
"current_release_date": "2024-11-14T14:32:36+00:00",
"generator": {
"date": "2024-11-14T14:32:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1891",
"initial_release_date": "2014-11-24T20:46:15+00:00",
"revision_history": [
{
"date": "2014-11-24T20:46:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:33:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:32:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss BRMS 6.0",
"product": {
"name": "Red Hat JBoss BRMS 6.0",
"product_id": "Red Hat JBoss BRMS 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_brms:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Decision Manager"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-24T20:46:15+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1891"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss BRMS 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-24T20:46:15+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss BRMS 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1891"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss BRMS 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1163
Vulnerability from csaf_redhat
Published
2014-09-04 16:11
Modified
2024-11-14 14:30
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update
Notes
Topic
An update for Red Hat JBoss Enterprise Application Platform 6.3.0 that
fixes two security issues is now available from the Red Hat Customer
Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3.0 as
provided from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat JBoss Enterprise Application Platform 6.3.0 that\nfixes two security issues is now available from the Red Hat Customer\nPortal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3.0 as\nprovided from the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1163",
"url": "https://access.redhat.com/errata/RHSA-2014:1163"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1163.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:30:12+00:00",
"generator": {
"date": "2024-11-14T14:30:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1163",
"initial_release_date": "2014-09-04T16:11:04+00:00",
"revision_history": [
{
"date": "2014-09-04T16:11:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-04T17:16:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:30:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-04T16:11:04+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-04T16:11:04+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1163"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1904
Vulnerability from csaf_redhat
Published
2014-11-25 16:48
Modified
2024-11-14 14:33
Summary
Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.0 update
Notes
Topic
Red Hat JBoss Operations Network 3.2.3, which fixes multiple security
issues and several bugs, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Operations Network is a middleware management solution that
provides a single point of control to deploy, manage, and monitor JBoss
Enterprise Middleware, applications, and services.
This JBoss Operations Network 3.3.0 release serves as a replacement for
JBoss Operations Network 3.2.3, and includes several bug fixes. Refer to
the JBoss Operations Network 3.3.0 Release Notes for information on the
most significant of these changes. The Release Notes will be available
shortly from https://access.redhat.com/documentation/en-US/
The following security issues are also fixed with this release:
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed. A
man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)
It was found that the default context parameters as provided to RESTEasy
deployments by JBoss EAP did not explicitly disable external entity
expansion for RESTEasy. A remote attacker could use this flaw to perform
XML External Entity (XXE) attacks on RESTEasy applications accepting XML
input. (CVE-2014-3481)
It was found that the fix for CVE-2012-0818 was incomplete: external
parameter entities were not disabled when the
resteasy.document.expand.entity.references parameter was set to false.
A remote attacker able to send XML requests to a RESTEasy endpoint could
use this flaw to read files accessible to the user running the application
server, and potentially perform other more advanced XXE attacks.
(CVE-2014-3490)
The HawtJNI Library class wrote native libraries to a predictable file name
in /tmp when the native libraries were bundled in a JAR file, and no custom
library path was specified. A local attacker could overwrite these native
libraries with malicious versions during the window between when HawtJNI
writes them and when they are executed. (CVE-2013-2035)
It was found that the security auditing functionality provided by PicketBox
and JBossSX, both security frameworks for Java applications, used a
world-readable audit.log file to record sensitive information. A local user
could possibly use this flaw to gain access to the sensitive information in
the audit.log file. (CVE-2014-0059)
The CVE-2013-2035 and CVE-2012-6153 issues were discovered by Florian
Weimer of Red Hat Product Security. The CVE-2014-3481 issue was discovered
by the Red Hat JBoss Enterprise Application Platform QE team. The
CVE-2014-3490 issue was discovered by David Jorm of Red Hat Product
Security.
All users of JBoss Operations Network 3.2.3 as provided from the Red Hat
Customer Portal are advised to upgrade to JBoss Operations Network 3.3.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Operations Network 3.2.3, which fixes multiple security\nissues and several bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Operations Network is a middleware management solution that\nprovides a single point of control to deploy, manage, and monitor JBoss\nEnterprise Middleware, applications, and services.\n\nThis JBoss Operations Network 3.3.0 release serves as a replacement for\nJBoss Operations Network 3.2.3, and includes several bug fixes. Refer to\nthe JBoss Operations Network 3.3.0 Release Notes for information on the\nmost significant of these changes. The Release Notes will be available\nshortly from https://access.redhat.com/documentation/en-US/\n\nThe following security issues are also fixed with this release:\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed. A\nman-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153, CVE-2014-3577)\n\nIt was found that the default context parameters as provided to RESTEasy\ndeployments by JBoss EAP did not explicitly disable external entity\nexpansion for RESTEasy. A remote attacker could use this flaw to perform\nXML External Entity (XXE) attacks on RESTEasy applications accepting XML\ninput. (CVE-2014-3481)\n\nIt was found that the fix for CVE-2012-0818 was incomplete: external\nparameter entities were not disabled when the\nresteasy.document.expand.entity.references parameter was set to false.\nA remote attacker able to send XML requests to a RESTEasy endpoint could\nuse this flaw to read files accessible to the user running the application\nserver, and potentially perform other more advanced XXE attacks.\n(CVE-2014-3490)\n\nThe HawtJNI Library class wrote native libraries to a predictable file name\nin /tmp when the native libraries were bundled in a JAR file, and no custom\nlibrary path was specified. A local attacker could overwrite these native\nlibraries with malicious versions during the window between when HawtJNI\nwrites them and when they are executed. (CVE-2013-2035)\n\nIt was found that the security auditing functionality provided by PicketBox\nand JBossSX, both security frameworks for Java applications, used a\nworld-readable audit.log file to record sensitive information. A local user\ncould possibly use this flaw to gain access to the sensitive information in\nthe audit.log file. (CVE-2014-0059)\n\nThe CVE-2013-2035 and CVE-2012-6153 issues were discovered by Florian\nWeimer of Red Hat Product Security. The CVE-2014-3481 issue was discovered\nby the Red Hat JBoss Enterprise Application Platform QE team. The\nCVE-2014-3490 issue was discovered by David Jorm of Red Hat Product\nSecurity.\n\nAll users of JBoss Operations Network 3.2.3 as provided from the Red Hat\nCustomer Portal are advised to upgrade to JBoss Operations Network 3.3.0.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1904",
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em\u0026downloadType=securityPatches\u0026version=3.3.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em\u0026downloadType=securityPatches\u0026version=3.3.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Operations_Network/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Operations_Network/"
},
{
"category": "external",
"summary": "958618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=958618"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1904.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.0 update",
"tracking": {
"current_release_date": "2024-11-14T14:33:16+00:00",
"generator": {
"date": "2024-11-14T14:33:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1904",
"initial_release_date": "2014-11-25T16:48:32+00:00",
"revision_history": [
{
"date": "2014-11-25T16:48:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:33:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:33:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Operations Network 3.3",
"product": {
"name": "Red Hat JBoss Operations Network 3.3",
"product_id": "Red Hat JBoss Operations Network 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_operations_network:3.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Operations Network"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security Team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-2035",
"cwe": {
"id": "CWE-377",
"name": "Insecure Temporary File"
},
"discovery_date": "2013-04-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "958618"
}
],
"notes": [
{
"category": "description",
"text": "The HawtJNI Library class wrote native libraries to a predictable file name in /tmp when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "HawtJNI: predictable temporary file name leading to local arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-2035"
},
{
"category": "external",
"summary": "RHBZ#958618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=958618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-2035",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2035"
}
],
"release_date": "2013-05-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "HawtJNI: predictable temporary file name leading to local arbitrary code execution"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Operations Network 3.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-25T16:48:32+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.0 Release Notes for\ninstallation information.",
"product_ids": [
"Red Hat JBoss Operations Network 3.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1904"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Operations Network 3.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
rhsa-2014_1162
Vulnerability from csaf_redhat
Published
2014-09-04 16:26
Modified
2024-11-14 14:30
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update
Notes
Topic
Updated Red Hat JBoss Enterprise Application Platform 6.3.0 packages that
fix two security issues are now available for Red Hat Enterprise Linux 5,
6, and 7.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the fix for CVE-2012-5783 was incomplete: the code added
to check that the server host name matches the domain name in a subject's
Common Name (CN) field in X.509 certificates was flawed.
A man-in-the-middle attacker could use this flaw to spoof an SSL server
using a specially crafted X.509 certificate. (CVE-2012-6153)
It was discovered that the HttpClient incorrectly extracted host name from
an X.509 certificate subject's Common Name (CN) field. A man-in-the-middle
attacker could use this flaw to spoof an SSL server using a specially
crafted X.509 certificate. (CVE-2014-3577)
The CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat
Product Security.
For additional information on these flaws, refer to the Knowledgebase
article in the References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3.0 on Red Hat
Enterprise Linux 5, 6, and 7 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Red Hat JBoss Enterprise Application Platform 6.3.0 packages that\nfix two security issues are now available for Red Hat Enterprise Linux 5,\n6, and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the fix for CVE-2012-5783 was incomplete: the code added\nto check that the server host name matches the domain name in a subject\u0027s\nCommon Name (CN) field in X.509 certificates was flawed.\nA man-in-the-middle attacker could use this flaw to spoof an SSL server\nusing a specially crafted X.509 certificate. (CVE-2012-6153)\n\nIt was discovered that the HttpClient incorrectly extracted host name from\nan X.509 certificate subject\u0027s Common Name (CN) field. A man-in-the-middle\nattacker could use this flaw to spoof an SSL server using a specially\ncrafted X.509 certificate. (CVE-2014-3577)\n\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat\nProduct Security.\n\nFor additional information on these flaws, refer to the Knowledgebase\narticle in the References section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3.0 on Red Hat\nEnterprise Linux 5, 6, and 7 are advised to upgrade to these updated\npackages. The JBoss server process must be restarted for the update to\ntake effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1162",
"url": "https://access.redhat.com/errata/RHSA-2014:1162"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/1165533",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1162.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update",
"tracking": {
"current_release_date": "2024-11-14T14:30:05+00:00",
"generator": {
"date": "2024-11-14T14:30:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1162",
"initial_release_date": "2014-09-04T16:26:13+00:00",
"revision_history": [
{
"date": "2014-09-04T16:26:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-04T16:26:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T14:30:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpmime-eap6@4.2.1-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcore-eap6@4.2.1-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client-eap6@4.2.1-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-project-eap6@6-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpclient-eap6@4.2.1-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_id": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-core-eap6@4.2.1-12.redhat_2.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpmime-eap6@4.2.1-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcore-eap6@4.2.1-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client-eap6@4.2.1-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-project-eap6@6-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpclient-eap6@4.2.1-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_id": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-core-eap6@4.2.1-12.redhat_2.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpmime-eap6@4.2.1-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcore-eap6@4.2.1-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-client-eap6@4.2.1-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-project-eap6@6-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpclient-eap6@4.2.1-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_id": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-core-eap6@4.2.1-12.redhat_2.1.ep6.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"product": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"product_id": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-eap6@6-12.redhat_2.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"product": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"product_id": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-eap6@6-12.redhat_2.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"product": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"product_id": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpcomponents-eap6@6-12.redhat_2.1.ep6.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src"
},
"product_reference": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server",
"product_id": "5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch"
},
"product_reference": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src"
},
"product_reference": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch"
},
"product_reference": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src"
},
"product_reference": "httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
},
"product_reference": "httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-6.3"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-04T16:26:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up any customized Red\nHat JBoss Enterprise Application Platform 6 configuration files. On update,\nthe configuration files that have been locally modified will not be\nupdated. The updated version of such files will be stored as the rpmnew\nfiles. Make sure to locate any such files after the update and merge any\nchanges manually.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1162"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-04T16:26:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied. Also, back up any customized Red\nHat JBoss Enterprise Application Platform 6 configuration files. On update,\nthe configuration files that have been locally modified will not be\nupdated. The updated version of such files will be stored as the rpmnew\nfiles. Make sure to locate any such files after the update and merge any\nchanges manually.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1162"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"5Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5.src",
"5Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"5Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el5.noarch",
"6Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6.src",
"6Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"6Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el6.noarch",
"7Server-JBEAP-6.3:httpclient-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-client-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-core-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7.src",
"7Server-JBEAP-6.3:httpcomponents-project-eap6-0:6-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpcore-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch",
"7Server-JBEAP-6.3:httpmime-eap6-0:4.2.1-12.redhat_2.1.ep6.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
wid-sec-w-2023-0432
Vulnerability from csaf_certbund
Published
2021-10-06 22:00
Modified
2023-02-20 23:00
Summary
Jenkins: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterst\u00fctzung bei Softwareentwicklungen aller Art.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0432 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-0432.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0432 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0432"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0769 vom 2023-02-21",
"url": "https://access.redhat.com/errata/RHSA-2023:0769"
},
{
"category": "external",
"summary": "Jenkins Security Advisory vom 2021-10-06",
"url": "https://www.jenkins.io/security/advisory/2021-10-06/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0055 vom 2022-03-10",
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0056 vom 2022-03-10",
"url": "https://access.redhat.com/errata/RHSA-2022:0056"
}
],
"source_lang": "en-US",
"title": "Jenkins: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-02-20T23:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:15:19.837+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-0432",
"initial_release_date": "2021-10-06T22:00:00.000+00:00",
"revision_history": [
{
"date": "2021-10-06T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2021-10-07T22:00:00.000+00:00",
"number": "2",
"summary": "Referenz(en) aufgenommen: 2011949"
},
{
"date": "2022-03-10T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-02-20T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Jenkins Jenkins plugins",
"product": {
"name": "Jenkins Jenkins plugins",
"product_id": "T013614",
"product_identification_helper": {
"cpe": "cpe:/a:cloudbees:jenkins:plugins"
}
}
},
{
"category": "product_name",
"name": "Jenkins Jenkins \u003c 2.315",
"product": {
"name": "Jenkins Jenkins \u003c 2.315",
"product_id": "T020571",
"product_identification_helper": {
"cpe": "cpe:/a:cloudbees:jenkins:2.315"
}
}
},
{
"category": "product_name",
"name": "Jenkins Jenkins \u003c LTS 2.303.2",
"product": {
"name": "Jenkins Jenkins \u003c LTS 2.303.2",
"product_id": "T020572",
"product_identification_helper": {
"cpe": "cpe:/a:cloudbees:jenkins:lts_2.303.2"
}
}
}
],
"category": "product_name",
"name": "Jenkins"
}
],
"category": "vendor",
"name": "Jenkins"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.12",
"product": {
"name": "Red Hat OpenShift Container Platform 4.12",
"product_id": "T026435",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform_4.12"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"notes": [
{
"category": "description",
"text": "In Jenkins existieren mehrere Schwachstellen. Die Schwachstellen bestehen im Jenkins Core sowie in verschiedenen Plugins. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"67646",
"T013614",
"T026435"
]
},
"release_date": "2021-10-06T22:00:00Z",
"title": "CVE-2014-3577"
},
{
"cve": "CVE-2021-21682",
"notes": [
{
"category": "description",
"text": "In Jenkins existieren mehrere Schwachstellen. Die Schwachstellen bestehen im Jenkins Core sowie in verschiedenen Plugins. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"67646",
"T013614",
"T026435"
]
},
"release_date": "2021-10-06T22:00:00Z",
"title": "CVE-2021-21682"
},
{
"cve": "CVE-2021-21683",
"notes": [
{
"category": "description",
"text": "In Jenkins existieren mehrere Schwachstellen. Die Schwachstellen bestehen im Jenkins Core sowie in verschiedenen Plugins. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"67646",
"T013614",
"T026435"
]
},
"release_date": "2021-10-06T22:00:00Z",
"title": "CVE-2021-21683"
},
{
"cve": "CVE-2021-21684",
"notes": [
{
"category": "description",
"text": "In Jenkins existieren mehrere Schwachstellen. Die Schwachstellen bestehen im Jenkins Core sowie in verschiedenen Plugins. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"67646",
"T013614",
"T026435"
]
},
"release_date": "2021-10-06T22:00:00Z",
"title": "CVE-2021-21684"
}
]
}
wid-sec-w-2022-1375
Vulnerability from csaf_certbund
Published
2022-09-11 22:00
Modified
2023-09-14 22:00
Summary
JFrog Artifactory: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
JFrog Artifactory ist eine universelle DevOps-Lösung.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme
- UNIX
- Linux
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "JFrog Artifactory ist eine universelle DevOps-L\u00f6sung.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-1375 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1375.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-1375 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1375"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5165 vom 2023-09-14",
"url": "https://access.redhat.com/errata/RHSA-2023:5165"
},
{
"category": "external",
"summary": "JFrog Fixed Security Vulnerabilities vom 2022-09-11",
"url": "https://www.jfrog.com/confluence/display/JFROG/Fixed+Security+Vulnerabilities"
},
{
"category": "external",
"summary": "JFrog Fixed Security Vulnerabilities",
"url": "https://www.jfrog.com/confluence/display/JFROG/Fixed+Security+Vulnerabilities"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:6782 vom 2022-10-04",
"url": "https://access.redhat.com/errata/RHSA-2022:6782"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5776-1 vom 2022-12-13",
"url": "https://ubuntu.com/security/notices/USN-5776-1"
}
],
"source_lang": "en-US",
"title": "JFrog Artifactory: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-09-14T22:00:00.000+00:00",
"generator": {
"date": "2024-02-15T16:58:09.779+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2022-1375",
"initial_release_date": "2022-09-11T22:00:00.000+00:00",
"revision_history": [
{
"date": "2022-09-11T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2022-10-03T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2022-10-04T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-12-12T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-12-20T23:00:00.000+00:00",
"number": "5",
"summary": "Referenz(en) aufgenommen: FEDORA-2022-DB674BAFD9, FEDORA-2022-7E327A20BE"
},
{
"date": "2023-09-14T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "6"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "JFrog Artifactory",
"product": {
"name": "JFrog Artifactory",
"product_id": "T024527",
"product_identification_helper": {
"cpe": "cpe:/a:jfrog:artifactory:-"
}
}
},
{
"category": "product_name",
"name": "JFrog Artifactory \u003c 7.46.3",
"product": {
"name": "JFrog Artifactory \u003c 7.46.3",
"product_id": "T024764",
"product_identification_helper": {
"cpe": "cpe:/a:jfrog:artifactory:7.46.3"
}
}
}
],
"category": "product_name",
"name": "Artifactory"
}
],
"category": "vendor",
"name": "JFrog"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4517",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2013-4517"
},
{
"cve": "CVE-2013-7285",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2013-7285"
},
{
"cve": "CVE-2014-0107",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2014-0107"
},
{
"cve": "CVE-2014-0114",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2014-0114"
},
{
"cve": "CVE-2014-3577",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2014-3577"
},
{
"cve": "CVE-2014-3623",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2014-3623"
},
{
"cve": "CVE-2015-0227",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2015-0227"
},
{
"cve": "CVE-2015-2575",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2015-2575"
},
{
"cve": "CVE-2015-3253",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2015-3253"
},
{
"cve": "CVE-2015-4852",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2015-4852"
},
{
"cve": "CVE-2015-7940",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2015-7940"
},
{
"cve": "CVE-2016-10750",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-10750"
},
{
"cve": "CVE-2016-3092",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-3092"
},
{
"cve": "CVE-2016-3674",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-3674"
},
{
"cve": "CVE-2016-6501",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-6501"
},
{
"cve": "CVE-2016-8735",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-8735"
},
{
"cve": "CVE-2016-8745",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2016-8745"
},
{
"cve": "CVE-2017-1000487",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-1000487"
},
{
"cve": "CVE-2017-15095",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-15095"
},
{
"cve": "CVE-2017-17485",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-17485"
},
{
"cve": "CVE-2017-18214",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-18214"
},
{
"cve": "CVE-2017-18640",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-18640"
},
{
"cve": "CVE-2017-7525",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-7525"
},
{
"cve": "CVE-2017-7657",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-7657"
},
{
"cve": "CVE-2017-7957",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-7957"
},
{
"cve": "CVE-2017-9506",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2017-9506"
},
{
"cve": "CVE-2018-1000206",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2018-1000206"
},
{
"cve": "CVE-2018-9116",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2018-9116"
},
{
"cve": "CVE-2019-10219",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2019-10219"
},
{
"cve": "CVE-2019-12402",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2019-12402"
},
{
"cve": "CVE-2019-17359",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2019-17359"
},
{
"cve": "CVE-2019-17571",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2019-17571"
},
{
"cve": "CVE-2019-20104",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2019-20104"
},
{
"cve": "CVE-2020-11996",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-11996"
},
{
"cve": "CVE-2020-13934",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-13934"
},
{
"cve": "CVE-2020-13935",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-13935"
},
{
"cve": "CVE-2020-13949",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-13949"
},
{
"cve": "CVE-2020-14340",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-14340"
},
{
"cve": "CVE-2020-15586",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-15586"
},
{
"cve": "CVE-2020-1745",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-1745"
},
{
"cve": "CVE-2020-17521",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-17521"
},
{
"cve": "CVE-2020-25649",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-25649"
},
{
"cve": "CVE-2020-28500",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-28500"
},
{
"cve": "CVE-2020-29582",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-29582"
},
{
"cve": "CVE-2020-36518",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-36518"
},
{
"cve": "CVE-2020-7226",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-7226"
},
{
"cve": "CVE-2020-7692",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-7692"
},
{
"cve": "CVE-2020-8203",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2020-8203"
},
{
"cve": "CVE-2021-13936",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-13936"
},
{
"cve": "CVE-2021-21290",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-21290"
},
{
"cve": "CVE-2021-22060",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22060"
},
{
"cve": "CVE-2021-22112",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22112"
},
{
"cve": "CVE-2021-22119",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22119"
},
{
"cve": "CVE-2021-22147",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22147"
},
{
"cve": "CVE-2021-22148",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22148"
},
{
"cve": "CVE-2021-22149",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22149"
},
{
"cve": "CVE-2021-22573",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-22573"
},
{
"cve": "CVE-2021-23337",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-23337"
},
{
"cve": "CVE-2021-25122",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-25122"
},
{
"cve": "CVE-2021-26291",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-26291"
},
{
"cve": "CVE-2021-27568",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-27568"
},
{
"cve": "CVE-2021-29505",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-29505"
},
{
"cve": "CVE-2021-30129",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-30129"
},
{
"cve": "CVE-2021-33037",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-33037"
},
{
"cve": "CVE-2021-35550",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35550"
},
{
"cve": "CVE-2021-35556",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35556"
},
{
"cve": "CVE-2021-35560",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35560"
},
{
"cve": "CVE-2021-35561",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35561"
},
{
"cve": "CVE-2021-35564",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35564"
},
{
"cve": "CVE-2021-35565",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35565"
},
{
"cve": "CVE-2021-35567",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35567"
},
{
"cve": "CVE-2021-35578",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35578"
},
{
"cve": "CVE-2021-35586",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35586"
},
{
"cve": "CVE-2021-35588",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35588"
},
{
"cve": "CVE-2021-35603",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-35603"
},
{
"cve": "CVE-2021-36374",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-36374"
},
{
"cve": "CVE-2021-3765",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-3765"
},
{
"cve": "CVE-2021-3807",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-3807"
},
{
"cve": "CVE-2021-38561",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-38561"
},
{
"cve": "CVE-2021-3859",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-3859"
},
{
"cve": "CVE-2021-41090",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-41090"
},
{
"cve": "CVE-2021-41091",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-41091"
},
{
"cve": "CVE-2021-42340",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-42340"
},
{
"cve": "CVE-2021-42550",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-42550"
},
{
"cve": "CVE-2021-43797",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2021-43797"
},
{
"cve": "CVE-2022-0536",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-0536"
},
{
"cve": "CVE-2022-22963",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-22963"
},
{
"cve": "CVE-2022-23632",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-23632"
},
{
"cve": "CVE-2022-23648",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-23648"
},
{
"cve": "CVE-2022-23806",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-23806"
},
{
"cve": "CVE-2022-24769",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-24769"
},
{
"cve": "CVE-2022-24823",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-24823"
},
{
"cve": "CVE-2022-27191",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-27191"
},
{
"cve": "CVE-2022-29153",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-29153"
},
{
"cve": "CVE-2022-32212",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-32212"
},
{
"cve": "CVE-2022-32213",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-32213"
},
{
"cve": "CVE-2022-32214",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-32214"
},
{
"cve": "CVE-2022-32215",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-32215"
},
{
"cve": "CVE-2022-32223",
"notes": [
{
"category": "description",
"text": "In JFrog Artifactory existieren Zahlreiche Schwachstellen in verschiedenen Komponenten von Drittanbietern. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen. Das erfolgreiche Ausnutzen einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"T024527",
"67646",
"T000126",
"T024764"
]
},
"release_date": "2022-09-11T22:00:00Z",
"title": "CVE-2022-32223"
}
]
}
wid-sec-w-2023-0306
Vulnerability from csaf_certbund
Published
2014-08-18 22:00
Modified
2024-05-06 22:00
Summary
Apache HttpComponents: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Apache HttpComponents ist ein Toolset von HTTP Java Komponenten.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Android
- Linux
- MacOS X
- Sonstiges
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apache HttpComponents ist ein Toolset von HTTP Java Komponenten.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Android\n- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0306 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2014/wid-sec-w-2023-0306.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0306 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0306"
},
{
"category": "external",
"summary": "Mailingliste OSS-Security vom 2014-08-18",
"url": "http://www.openwall.com/lists/oss-security/2014/08/18/8"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1082-1 vom 2014-08-20",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1082.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1146-1 vom 2014-09-03",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"category": "external",
"summary": "CentOS Errata and Security Advisory 2014:1146 vom 2014-09-03",
"url": "http://lists.centos.org/pipermail/centos-announce/2014-September/020530.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1162-1 vom 2014-09-04",
"url": "https://rhn.redhat.com/errata/RHSA-2014-1162.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1163-2 vom 2014-09-04",
"url": "https://rhn.redhat.com/errata/RHSA-2014-1163.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1166-1 vom 2014-09-08",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"category": "external",
"summary": "CentOS Errata and Security Advisory 2014:1166 vom 2014-09-08",
"url": "http://lists.centos.org/pipermail/centos-announce/2014-September/020544.html"
},
{
"category": "external",
"summary": "CentOS Errata and Security Advisory 2014:1166 vom 2014-09-08",
"url": "http://lists.centos.org/pipermail/centos-announce/2014-September/020545.html"
},
{
"category": "external",
"summary": "CentOS Errata and Security Advisory 2014:1166 vom 2014-09-08",
"url": "http://lists.centos.org/pipermail/centos-announce/2014-September/020546.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1834-1 vom 2014-11-10",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2014:1833-1 vom 2014-11-10",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-2769-1 vom 2015-10-15",
"url": "http://www.ubuntu.com/usn/usn-2769-1/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2016:1773-1 vom 2016-08-24",
"url": "https://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2016:1931-1 vom 2016-09-23",
"url": "https://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:3152-1 vom 2020-11-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007692.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:3151-1 vom 2020-11-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007690.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:3149-1 vom 2020-11-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007689.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0055 vom 2022-03-10",
"url": "https://access.redhat.com/errata/RHSA-2022:0055"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:0056 vom 2022-03-10",
"url": "https://access.redhat.com/errata/RHSA-2022:0056"
},
{
"category": "external",
"summary": "IBM Security Bulletin 6953757 vom 2023-02-08",
"url": "https://www.ibm.com/support/pages/node/6953757"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7008449 vom 2023-06-29",
"url": "https://www.ibm.com/support/pages/node/7008449"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7037815 vom 2023-09-22",
"url": "https://www.ibm.com/support/pages/node/7037815"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-208 vom 2024-05-07",
"url": "https://www.dell.com/support/kbdoc/000224800/dsa-2024-="
}
],
"source_lang": "en-US",
"title": "Apache HttpComponents: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
"tracking": {
"current_release_date": "2024-05-06T22:00:00.000+00:00",
"generator": {
"date": "2024-05-07T08:34:57.802+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-0306",
"initial_release_date": "2014-08-18T22:00:00.000+00:00",
"revision_history": [
{
"date": "2014-08-18T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2014-08-18T22:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-08-20T22:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2014-08-20T22:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-09-03T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2014-09-03T22:00:00.000+00:00",
"number": "6",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-09-03T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2014-09-03T22:00:00.000+00:00",
"number": "8",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-09-04T22:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2014-09-04T22:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2014-09-04T22:00:00.000+00:00",
"number": "11",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "12",
"summary": "New remediations available"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "13",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "14",
"summary": "New remediations available"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2014-09-08T22:00:00.000+00:00",
"number": "17",
"summary": "Version nicht vorhanden"
},
{
"date": "2014-11-10T23:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2015-10-14T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2016-08-24T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2016-08-24T22:00:00.000+00:00",
"number": "21",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-09-25T22:00:00.000+00:00",
"number": "22",
"summary": "New remediations available"
},
{
"date": "2016-09-25T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2020-11-04T23:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-03-10T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-02-08T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-06-29T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-09-24T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-05-06T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Dell aufgenommen"
}
],
"status": "final",
"version": "29"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "HttpClient \u003c4.3.5",
"product": {
"name": "Apache HttpComponents HttpClient \u003c4.3.5",
"product_id": "T003641",
"product_identification_helper": {
"cpe": "cpe:/a:apache:http_components:4.3.5::httpclient"
}
}
},
{
"category": "product_version_range",
"name": "HttpAsyncClient \u003c4.0.2",
"product": {
"name": "Apache HttpComponents HttpAsyncClient \u003c4.0.2",
"product_id": "T003642",
"product_identification_helper": {
"cpe": "cpe:/a:apache:http_components:4.0.2::httpasyncclient"
}
}
}
],
"category": "product_name",
"name": "HttpComponents"
}
],
"category": "vendor",
"name": "Apache"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Server \u003c19.9.0.6",
"product": {
"name": "Dell NetWorker Server \u003c19.9.0.6",
"product_id": "T034567",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:server__19.9.0.6"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM DB2",
"product": {
"name": "IBM DB2",
"product_id": "5104",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:db2:-"
}
}
},
{
"category": "product_name",
"name": "IBM Spectrum Protect",
"product": {
"name": "IBM Spectrum Protect",
"product_id": "T013661",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spectrum_protect:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "5",
"product": {
"name": "Open Source CentOS 5",
"product_id": "122559",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:5"
}
}
},
{
"category": "product_version",
"name": "6",
"product": {
"name": "Open Source CentOS 6",
"product_id": "160056",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:6"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Open Source CentOS 7",
"product_id": "T003633",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:7"
}
}
}
],
"category": "product_name",
"name": "CentOS"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "6",
"product": {
"name": "Red Hat Enterprise Linux 6",
"product_id": "120737",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
},
{
"category": "product_version",
"name": "5",
"product": {
"name": "Red Hat Enterprise Linux Server 5",
"product_id": "T000179",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5"
}
}
},
{
"category": "product_version",
"name": "6",
"product": {
"name": "Red Hat Enterprise Linux Server 6",
"product_id": "T000343",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
},
{
"category": "product_version",
"name": "6.5.z",
"product": {
"name": "Red Hat Enterprise Linux Server EUS 6.5.z",
"product_id": "T002243",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6.5.z:server:eus"
}
}
},
{
"category": "product_version",
"name": "6.5",
"product": {
"name": "Red Hat Enterprise Linux Server AUS 6.5",
"product_id": "T002517",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6.5:server:aus"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Red Hat Enterprise Linux Server 7",
"product_id": "T003303",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "5",
"product": {
"name": "Red Hat Enterprise Linux Desktop 5",
"product_id": "T000180",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_desktop:5"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Red Hat Enterprise Linux Desktop 7",
"product_id": "T003548",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_desktop:7"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux Desktop"
},
{
"branches": [
{
"category": "product_version",
"name": "6",
"product": {
"name": "Red Hat Enterprise Linux HPC Node 6",
"product_id": "T001927",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:6"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Red Hat Enterprise Linux HPC Node 7",
"product_id": "T003549",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux HPC Node"
},
{
"branches": [
{
"category": "product_version",
"name": "6",
"product": {
"name": "Red Hat Enterprise Linux Workstation 6",
"product_id": "T000396",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_workstation:6"
}
}
},
{
"category": "product_version",
"name": "5",
"product": {
"name": "Red Hat Enterprise Linux Workstation 5",
"product_id": "T000622",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_workstation:5"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Red Hat Enterprise Linux Workstation 7",
"product_id": "T003565",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_workstation:7"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux Workstation"
},
{
"branches": [
{
"category": "product_version",
"name": "6 EL5",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6 EL5",
"product_id": "T001224",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6:el5"
}
}
},
{
"category": "product_version",
"name": "6 EL6",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6 EL6",
"product_id": "T001225",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6:el6"
}
}
},
{
"category": "product_version",
"name": "6.3.0",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3.0",
"product_id": "T003588",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.3.0"
}
}
}
],
"category": "product_name",
"name": "JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "2",
"product": {
"name": "Red Hat OpenShift Enterprise 2",
"product_id": "T002673",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:2"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3577",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Apache HttpComponents. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, wenn ein Benutzer per HTTPS auf eine Webseite zugreift. Die Schwachstelle kann dazu ausgenutzt werden, um mit einem speziellen Zertifikat einen Man-in-the-Middle Angriff durchzuf\u00fchren. Die Schwachstelle besteht in den Komponenten HttpClient und HttpAsyncClient."
}
],
"product_status": {
"known_affected": [
"T000180",
"T034567",
"T002673",
"T003565",
"T003588",
"T003303",
"T003633",
"160056",
"T003548",
"T003549",
"T013661",
"T001927",
"T002517",
"T002207",
"T000622",
"T001225",
"5104",
"T000179",
"120737",
"T001224",
"T000343",
"T000396",
"T002243",
"122559"
]
},
"release_date": "2014-08-18T22:00:00Z",
"title": "CVE-2014-3577"
}
]
}
gsd-2014-3577
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2014-3577",
"description": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.",
"id": "GSD-2014-3577",
"references": [
"https://www.suse.com/security/cve/CVE-2014-3577.html",
"https://access.redhat.com/errata/RHSA-2016:1931",
"https://access.redhat.com/errata/RHSA-2016:1773",
"https://access.redhat.com/errata/RHSA-2015:1888",
"https://access.redhat.com/errata/RHSA-2015:1177",
"https://access.redhat.com/errata/RHSA-2015:1176",
"https://access.redhat.com/errata/RHSA-2015:1009",
"https://access.redhat.com/errata/RHSA-2015:0851",
"https://access.redhat.com/errata/RHSA-2015:0850",
"https://access.redhat.com/errata/RHSA-2015:0765",
"https://access.redhat.com/errata/RHSA-2015:0720",
"https://access.redhat.com/errata/RHSA-2015:0675",
"https://access.redhat.com/errata/RHSA-2015:0235",
"https://access.redhat.com/errata/RHSA-2015:0234",
"https://access.redhat.com/errata/RHSA-2015:0158",
"https://access.redhat.com/errata/RHSA-2015:0125",
"https://access.redhat.com/errata/RHSA-2014:2020",
"https://access.redhat.com/errata/RHSA-2014:2019",
"https://access.redhat.com/errata/RHSA-2014:1904",
"https://access.redhat.com/errata/RHSA-2014:1892",
"https://access.redhat.com/errata/RHSA-2014:1891",
"https://access.redhat.com/errata/RHSA-2014:1836",
"https://access.redhat.com/errata/RHSA-2014:1835",
"https://access.redhat.com/errata/RHSA-2014:1834",
"https://access.redhat.com/errata/RHSA-2014:1833",
"https://access.redhat.com/errata/RHSA-2014:1323",
"https://access.redhat.com/errata/RHSA-2014:1322",
"https://access.redhat.com/errata/RHSA-2014:1321",
"https://access.redhat.com/errata/RHSA-2014:1320",
"https://access.redhat.com/errata/RHSA-2014:1166",
"https://access.redhat.com/errata/RHSA-2014:1163",
"https://access.redhat.com/errata/RHSA-2014:1162",
"https://access.redhat.com/errata/RHSA-2014:1146",
"https://access.redhat.com/errata/RHSA-2014:1082",
"https://access.redhat.com/errata/RHSA-2022:0055",
"https://ubuntu.com/security/CVE-2014-3577",
"https://advisories.mageia.org/CVE-2014-3577.html",
"https://security.archlinux.org/CVE-2014-3577",
"https://alas.aws.amazon.com/cve/html/CVE-2014-3577.html",
"https://linux.oracle.com/cve/CVE-2014-3577.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2014-3577"
],
"details": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.",
"id": "GSD-2014-3577",
"modified": "2023-12-13T01:22:52.951043Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-3577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2014:1891",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1891.html"
},
{
"name": "RHSA-2015:0765",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"name": "https://access.redhat.com/solutions/1165533",
"refsource": "CONFIRM",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"name": "110143",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/110143"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2015:0675",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "60713",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60713"
},
{
"name": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html"
},
{
"name": "RHSA-2015:0720",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "RHSA-2014:1166",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"name": "RHSA-2015:1888",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
},
{
"name": "RHSA-2014:1833",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"name": "RHSA-2015:0850",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html"
},
{
"name": "RHSA-2015:0158",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0158.html"
},
{
"name": "RHSA-2014:1834",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"name": "60466",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60466"
},
{
"name": "RHSA-2015:0125",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0125.html"
},
{
"name": "RHSA-2015:1176",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
},
{
"name": "RHSA-2016:1931",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"name": "RHSA-2014:1146",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"name": "RHSA-2015:1177",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
},
{
"name": "69258",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/69258"
},
{
"name": "RHSA-2014:1892",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1892.html"
},
{
"name": "RHSA-2015:0851",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564"
},
{
"name": "RHSA-2014:1835",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1835.html"
},
{
"name": "1030812",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1030812"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782"
},
{
"name": "USN-2769-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2769-1"
},
{
"name": "60589",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60589"
},
{
"name": "RHSA-2014:1836",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1836.html"
},
{
"name": "apache-cve20143577-spoofing(95327)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95327"
},
{
"name": "20140818 CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2014/Aug/48"
},
{
"name": "RHSA-2016:1773",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"
},
{
"name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:1873",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html"
},
{
"name": "openSUSE-SU-2020:1875",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html"
},
{
"name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[oss-security] 20211006 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/10/06/1"
},
{
"name": "https://security.netapp.com/advisory/ntap-20231027-0003/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20231027-0003/"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "(,4.3.5)",
"affected_versions": "All versions before 4.3.5",
"cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2021-10-08",
"description": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.",
"fixed_versions": [
"4.3.5"
],
"identifier": "CVE-2014-3577",
"identifiers": [
"GHSA-cfh5-3ghh-wfjx",
"CVE-2014-3577"
],
"not_impacted": "All versions starting from 4.3.5",
"package_slug": "maven/org.apache.httpcomponents/httpclient",
"pubdate": "2018-10-17",
"solution": "Upgrade to version 4.3.5 or above.",
"title": "Moderate severity vulnerability that affects org.apache.httpcomponents:httpclient",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"https://access.redhat.com/solutions/1165533",
"https://exchange.xforce.ibmcloud.com/vulnerabilities/95327",
"https://github.com/advisories/GHSA-cfh5-3ghh-wfjx",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564",
"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782",
"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E",
"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E",
"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E",
"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E",
"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E",
"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E",
"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E",
"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E",
"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E",
"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html",
"http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html",
"http://rhn.redhat.com/errata/RHSA-2014-1146.html",
"http://rhn.redhat.com/errata/RHSA-2014-1166.html",
"http://rhn.redhat.com/errata/RHSA-2014-1833.html",
"http://rhn.redhat.com/errata/RHSA-2014-1834.html",
"http://rhn.redhat.com/errata/RHSA-2014-1835.html",
"http://rhn.redhat.com/errata/RHSA-2014-1836.html",
"http://rhn.redhat.com/errata/RHSA-2014-1891.html",
"http://rhn.redhat.com/errata/RHSA-2014-1892.html",
"http://rhn.redhat.com/errata/RHSA-2015-0125.html",
"http://rhn.redhat.com/errata/RHSA-2015-0158.html",
"http://rhn.redhat.com/errata/RHSA-2015-0675.html",
"http://rhn.redhat.com/errata/RHSA-2015-0720.html",
"http://rhn.redhat.com/errata/RHSA-2015-0765.html",
"http://rhn.redhat.com/errata/RHSA-2015-0850.html",
"http://rhn.redhat.com/errata/RHSA-2015-0851.html",
"http://rhn.redhat.com/errata/RHSA-2015-1176.html",
"http://rhn.redhat.com/errata/RHSA-2015-1177.html",
"http://rhn.redhat.com/errata/RHSA-2015-1888.html",
"http://rhn.redhat.com/errata/RHSA-2016-1773.html",
"http://rhn.redhat.com/errata/RHSA-2016-1931.html",
"http://seclists.org/fulldisclosure/2014/Aug/48",
"http://secunia.com/advisories/60466",
"http://secunia.com/advisories/60589",
"http://secunia.com/advisories/60713",
"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"http://www.osvdb.org/110143",
"http://www.securityfocus.com/bid/69258",
"http://www.securitytracker.com/id/1030812",
"http://www.ubuntu.com/usn/USN-2769-1",
"http://www.openwall.com/lists/oss-security/2021/10/06/1"
],
"uuid": "4987a6b9-05b9-46a6-a755-a5354ab9ce56"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:httpclient:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.3.4",
"versionStartIncluding": "4.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:httpasyncclient:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.0.1",
"versionStartIncluding": "4.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-3577"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20140818 CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack",
"refsource": "FULLDISC",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2014/Aug/48"
},
{
"name": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html"
},
{
"name": "60713",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/60713"
},
{
"name": "60589",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/60589"
},
{
"name": "https://access.redhat.com/solutions/1165533",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/solutions/1165533"
},
{
"name": "RHSA-2014:1146",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"name": "RHSA-2014:1166",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"name": "RHSA-2014:1892",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1892.html"
},
{
"name": "RHSA-2014:1891",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1891.html"
},
{
"name": "RHSA-2014:1836",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1836.html"
},
{
"name": "RHSA-2014:1835",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1835.html"
},
{
"name": "RHSA-2014:1834",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"name": "RHSA-2014:1833",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"name": "RHSA-2015:0158",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0158.html"
},
{
"name": "RHSA-2015:0125",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0125.html"
},
{
"name": "RHSA-2015:0675",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "RHSA-2015:0720",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "RHSA-2015:0765",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"name": "RHSA-2015:0851",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html"
},
{
"name": "RHSA-2015:0850",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html"
},
{
"name": "RHSA-2015:1177",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
},
{
"name": "RHSA-2015:1176",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
},
{
"name": "USN-2769-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2769-1"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564"
},
{
"name": "69258",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/69258"
},
{
"name": "1030812",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1030812"
},
{
"name": "110143",
"refsource": "OSVDB",
"tags": [
"Broken Link"
],
"url": "http://www.osvdb.org/110143"
},
{
"name": "60466",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/60466"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782"
},
{
"name": "apache-cve20143577-spoofing(95327)",
"refsource": "XF",
"tags": [
"VDB Entry",
"Third Party Advisory"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95327"
},
{
"name": "RHSA-2016:1931",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"name": "RHSA-2016:1773",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"name": "RHSA-2015:1888",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
},
{
"name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"
},
{
"name": "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:1873",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html"
},
{
"name": "openSUSE-SU-2020:1875",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html"
},
{
"name": "[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"
},
{
"name": "[oss-security] 20211006 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2021/10/06/1"
},
{
"name": "https://security.netapp.com/advisory/ntap-20231027-0003/",
"refsource": "CONFIRM",
"tags": [],
"url": "https://security.netapp.com/advisory/ntap-20231027-0003/"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-10-27T15:15Z",
"publishedDate": "2014-08-21T14:55Z"
}
}
}
ghsa-cfh5-3ghh-wfjx
Vulnerability from github
Published
2018-10-17 00:05
Modified
2024-04-12 22:05
Summary
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Details
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.httpcomponents:httpclient"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.3.5"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2014-3577"
],
"database_specific": {
"cwe_ids": [
"CWE-347"
],
"github_reviewed": true,
"github_reviewed_at": "2020-06-16T21:31:17Z",
"nvd_published_at": "2014-08-21T14:55:00Z",
"severity": "MODERATE"
},
"details": "org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject\u0027s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.",
"id": "GHSA-cfh5-3ghh-wfjx",
"modified": "2024-04-12T22:05:35Z",
"published": "2018-10-17T00:05:06Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
},
{
"type": "WEB",
"url": "https://github.com/apache/httpcomponents-client/commit/51cc67567765d67f878f0dcef61b5ded454d3122"
},
{
"type": "WEB",
"url": "https://svn.apache.org/viewvc?view=revision\u0026revision=1614064"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20231027-0003"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/httpcomponents-client"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-cfh5-3ghh-wfjx"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95327"
},
{
"type": "WEB",
"url": "https://access.redhat.com/solutions/1165533"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1146.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1166.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1833.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1834.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1835.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1836.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1891.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1892.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0125.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0158.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-1773.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-1931.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2014/Aug/48"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2021/10/06/1"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2769-1"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient"
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.